CVE-2019-19822 Auth bypass in n/a
Remote attackers can bypass authentication to retrieve sensitive router configuration data, including usernames and passwords, affecting multiple Realtek-based devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-19822?
CVE-2019-19822 is a high-severity authentication bypass vulnerability in n/a, published on 27 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.
Weakness: CWE-306
Which versions are affected by CVE-2019-19822?
It affects 18 products.
Products include Ciktel Mesh Router Firmware, Coship Emta Ap Firmwre, Fg-Products Fgn-R2 Firmware, Hcn Max-C300n Project Hcn Max-C300n Firmware, Hiwifi Max-C300n Firmware, Iodata Wn-Ac1167r Firmwre and 12 more.
How do I fix CVE-2019-19822?
No fix has been published for CVE-2019-19822 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-19822 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-19822 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in n/a
Sources
Also known as GHSA-552g-mhvj-f64v.