← Retour aux CVEs

CVE-2019-13379

N/A

Description

On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in.

Details CVE

Score CVSS v3.1N/A

Publie7/7/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

avtech:room_alert_3eavtech:room_alert_3e_firmware

Faiblesses (CWE)

CWE-668

References

https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/(cve@mitre.org)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010(cve@mitre.org)

https://www.youtube.com/watch?v=X1PY7kMFkVg(cve@mitre.org)

https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/(af854a3a-2127-422b-91ae-364da2661108)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010(af854a3a-2127-422b-91ae-364da2661108)

https://www.youtube.com/watch?v=X1PY7kMFkVg(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.