CVE-2019-6551 Auth bypass in Pangea Communications Internet FAX ATA
Attackers can bypass authentication via a crafted URL to reboot the device, causing a denial-of-service condition.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6551?
CVE-2019-6551 is a high-severity authentication bypass vulnerability in ICS-CERT Pangea Communications Internet FAX ATA, published on 28 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition.
Which versions are affected by CVE-2019-6551?
It affects 1 product.
Products include Pangea-Comm Fax Ata.
How do I fix CVE-2019-6551?
No fix has been published for CVE-2019-6551 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-6551 being exploited?
There is no known exploitation of CVE-2019-6551 in the wild and no public exploit code.
Sources
Also known as GHSA-xgfw-p7jc-xwr2.