← Volver a CVEs

CVE-2019-13379

N/A

Descripcion

On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado7/7/2019

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

avtech:room_alert_3eavtech:room_alert_3e_firmware

Debilidades (CWE)

CWE-668

Referencias

https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/(cve@mitre.org)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010(cve@mitre.org)

https://www.youtube.com/watch?v=X1PY7kMFkVg(cve@mitre.org)

https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/(af854a3a-2127-422b-91ae-364da2661108)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010(af854a3a-2127-422b-91ae-364da2661108)

https://www.youtube.com/watch?v=X1PY7kMFkVg(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.