TOTOLINK EX200 vsftpd Configuration Least Privilege Violation Vulnerability

A vulnerability has been identified in the TOTOLINK EX200 router, specifically in version 4.0.3c.7646. The issue arises from an unknown function in the vsftpd configuration file, /etc/vsftpd.conf, which leads to a least privilege violation. This vulnerability can be exploited remotely, and the exploit has been made public.

Impact

Exploitation of this vulnerability could lead to unauthorized access or privileges, allowing an attacker to perform actions or access resources that should be restricted.