Vulnerability in N/a
CVE-2019-19822
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU thro…
EPSS: 0.541 (98.1th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/… (x_refsource_MISC)
- opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz (x_refsource_MISC)
- sploit.tech (x_refsource_MISC)
- 20200124 Multiple vulnerabilities in TOTOLINK and other Realtek SDK based routers (mailing-list, x_refsource_FULLDISC)
- packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Ex… (x_refsource_MISC)
- 20200131 Re: Multiple vulnerabilities in TOTOLINK and other Realtek SDK based routers (mailing-list, x_refsource_FULLDISC)
Frequently asked questions
- What is CVE-2019-19822?
- CVE-2019-19822 is a vulnerability in N/a. Published 2020-01-27.
- Is CVE-2019-19822 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.