CVE-2019-19824 in Realtek SDKinfo

Zusammenfassung

von MITRE

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservieren

16.12.2019

Moderieren

akzeptiert

Eintrag

VDB-149413

CPE

bereit

EPSS

0.25135

KEV

nein

Aktivitäten

very low

Quellen

Do you want to use VulDB in your project?

Use the official API to access entries easily!