CVE-2019-18235 Auth bypass in Advantech Spectre RT ERT351 Versions 5.1.3 and prior
Insufficient login authentication parameters in Advantech Spectre RT allow attackers to gain full access via brute-force password attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-18235?
CVE-2019-18235 is a critical authentication bypass vulnerability in Advantech Spectre RT ERT351 Versions 5.1.3 and prior, published on 17 Mar 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack.
Weakness: CWE-307
Which versions are affected by CVE-2019-18235?
It affects 1 product.
Products include Advantech Spectre Rt Ert351 Firmware.
How do I fix CVE-2019-18235?
No fix has been published for CVE-2019-18235 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-18235 being exploited?
There is no known exploitation of CVE-2019-18235 in the wild and no public exploit code.
Other vulnerabilities in Advantech Spectre RT ERT351 Versions 5.1.3 and prior
Sources
Also known as GHSA-pr9p-f58p-r8w8.