WODESYS WD-R608U Router Unauthenticated Configuration File Access Vulnerability

A vulnerability exists in the WODESYS WD-R608U router, also known as the WDR122B V2.0 and WDR28, allowing unauthorized users to access configuration files by directly referencing the relevant resource. This issue has been confirmed in the WDR28081123OV1.01 version, while other versions may also be vulnerable. The lack of authentication in the configuration management module at the 'adm.cgi' endpoint enables this unauthorized access.

Impact

Exploitation of this vulnerability allows unauthorized users to view sensitive configuration files, which may contain critical information such as passwords or network settings.