An unauthenticated file disclosure vulnerability in the Across DR-810 router exposes sensitive configuration data and administrative credentials to remote attackers.

This vulnerability is an improper access control flaw (CWE-538) where the device allows unauthenticated users to perform a GET request to the /rom-0 endpoint. This action retrieves a backup file containing plaintext router passwords and configuration settings.

The compromise of the rom-0 backup file grants an attacker full access to the router configuration. This facilitates unauthorized network access, potential man-in-the-middle attacks, and total loss of device control. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to organizational confidentiality and infrastructure integrity.

Immediate Action: There is no known manufacturer patch available for this legacy device. Organizations must immediately restrict access to the management interface of the DR-810 from untrusted networks and replace the hardware with a supported, secure alternative.

Proactive Monitoring: Monitor network logs for HTTP GET requests directed at the /rom-0 endpoint or other unusual traffic patterns originating from external IP addresses.

Compensating Controls: Deploy a Web Application Firewall or an edge firewall to block all external access to the router's management web interface, ensuring it is only accessible via a secure, internal, or VPN-restricted management VLAN.

Public Exploit Available: Yes, a proof-of-concept exploit is available via the Exploit-DB entry 46132.

Due to the lack of vendor support and the availability of a public exploit, the Across DR-810 should be considered fundamentally insecure. Security teams should prioritize the decommissioning of these devices, as applying virtual patching or firewall restrictions is only a temporary measure against this critical exposure of sensitive configuration data.