← Zuruck zu CVEs

CVE-2019-13379

N/A

Beschreibung

On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht7/7/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

avtech:room_alert_3eavtech:room_alert_3e_firmware

Schwachen (CWE)

CWE-668

Referenzen

https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/(cve@mitre.org)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010(cve@mitre.org)

https://www.youtube.com/watch?v=X1PY7kMFkVg(cve@mitre.org)

https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/(af854a3a-2127-422b-91ae-364da2661108)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010(af854a3a-2127-422b-91ae-364da2661108)

https://www.youtube.com/watch?v=X1PY7kMFkVg(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.