← Back to CVEs

CVE-2019-13379

N/A

Description

On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in.

CVE Details

CVSS v3.1 ScoreN/A

Published7/7/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

avtech:room_alert_3eavtech:room_alert_3e_firmware

Weaknesses (CWE)

CWE-668

References

https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/(cve@mitre.org)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010(cve@mitre.org)

https://www.youtube.com/watch?v=X1PY7kMFkVg(cve@mitre.org)

https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/(af854a3a-2127-422b-91ae-364da2661108)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010(af854a3a-2127-422b-91ae-364da2661108)

https://www.youtube.com/watch?v=X1PY7kMFkVg(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.