Quantum Networks Router Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in the Quantum Networks Router QN-I-470, specifically in firmware version 6.1.1.B1. This vulnerability arises from improper access control and insecure default configurations in the web-based management interface. An unauthenticated attacker could exploit this issue by accessing exposed API endpoints on the device, potentially leading to unauthorized access to sensitive information such as internal endpoints, scripts, and directories.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information on the affected device, including internal endpoints, scripts, and directories.

Remediation

Users are advised to upgrade the Quantum Networks Router QN-I-470 to the latest firmware version 7.5.4.B9.