CVE-2019-6441 Auth bypass in n/a
Attackers can reset admin credentials without authentication via a POST request, gaining full control of the router.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6441?
CVE-2019-6441 is a critical authentication bypass vulnerability in n/a, published on 19 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router.
Weakness: CWE-287
Which versions are affected by CVE-2019-6441?
It affects 4 products.
Products include Coship Rt3050 Firmware, Coship Rt3052 Firmware, Coship Rt7620 Firmware, Coship Wm3300 Firmware.
How do I fix CVE-2019-6441?
No fix has been published for CVE-2019-6441 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-6441 being exploited?
There is no known exploitation of CVE-2019-6441 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gvmx-6cqv-6x5q.