An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated dump of all of the config files through a certain admin.cgi?action insecure HTTP request.
Publication date: Thu, 01 Aug 2019 18:15:00 +0000