Multilaser Sirius RE016 Information Disclosure Vulnerability in cstecgi.cgi

An information disclosure vulnerability has been identified in the Multilaser Sirius RE016 model, specifically in the file '/cgi-bin/cstecgi.cgi'. This vulnerability allows for unauthorized access to sensitive information and can be exploited remotely.

Impact

Exploitation of this vulnerability leads to unauthorized information disclosure.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/cgi-bin/cstecgi.cgi' with a payload requesting 'setting/getLoginCfg'. If successful, the response will contain the login credentials.