A vulnerability is in the 'tftp.txt' page of the Wavlink-WiFi-Repeater,Firmware package version RPTA2-77W.M4300.01.GD.2017Sep19,The attacker can access the constructed page to obtain the telnet account password.
Unauthorized users can obtain the key information of the router by visiting:
http://xxx.xxx.xxx.xxx/tftp.txt
Wavlink-WiFi-Repeater
The txt text does not set reasonable access rights.
Penwei.Huang