L-14

A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-823G version 1.0.2B05 **Description** A security flaw in the vsftpd component, specifically within an unknown function of the `/etc/vsftpd.conf` file, allows for a least privilege violation. This issue can be triggered remotely through manipulation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC15 version 15.03.05.19 **Description** A weakness exists in the Samba component, specifically within an unknown function of the `/etc ro/smb.conf` file. This issue allows for the execution of a manipulation that results in weak password requirements. The attack is restricted to the local network and is characterized by high complexity and difficult exploitability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK AC1200 T8 version 4.1.5cu.8611 **Description** A least privilege violation exists in the vsftpd component, specifically within the `/etc/vsftpd.conf` file. This issue allows a remote attacker to compromise the system's privilege model. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK CP450 version 4.1.0cu.747 **Description** A least privilege violation exists in the vsftpd component, specifically within the `/etc/vsftpd.conf` file. This issue allows a remote attacker to perform manipulations that violate the principle of least privilege, which ensures that a process or user has only the minimum permissions necessary to perform its function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.