A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configuration file via sending a crafted HTTP request.
https://github.com/hurricane618/my_cves/blob/master/router/totolink/A720R_leak_config_file.md