Ac2400 Firmware

ac2400_firmware

Vendor: Comba • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2019-15654

1Comba

1Ac2400 Firmware

Jun 17, 2026

Mar 19, 2020

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any authentication and will lead to saving the DBconfig.cfg file. At the end of the file, the login information is stored in cleartext.Show less