Medium severity5.3NVD Advisory· Published Nov 27, 2020· Updated Jun 17, 2026
CVE-2020-29138
CVE-2020-29138
Description
Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running.
Affected products
4- Range: = NET_4.109.0
- SAGEMCOM/F@ST3486 NET DOCSIS 3.0description
- cpe:2.3:o:sagemcom:f\@st_3486_router_firmware:4.109.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.