CVE-2019-25470

HIGH

7.5

Descripcion

eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exploiting the wsdReadForm endpoint. Attackers can send POST requests to /wrcgi.bin/wsdReadForm with base64-encoded partial credentials and a crafted wsdList parameter to extract encrypted passwords for all users, which can be decrypted using a hardcoded XOR key.

Detalles CVE

Puntuacion CVSS v3.17.5

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado3/11/2026

Ultima modificacion3/12/2026

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-798

Referencias

https://www.ewon.biz(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/47380(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/ewon-firmware-authentication-bypass-via-wsdreadform(disclosure@vulncheck.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.