High severity · published Jan 27, 2020
CVE-2019-19823
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file
7.5
CVSS
6.4%
EPSS
No
On KEV
Description
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
A3002ru Firmware · Totolink
through 2.0.0 · source: NVD
AF
A702r Firmware · Totolink
through 2.1.3 · source: NVD
EA
Emta AP Firmwre · Coship
through 2019-12-12 · source: NVD
FF
Fgn-r2 Firmware · Fg-products
through 2019-12-12 · source: NVD
GF
Gn-866ac Firmware · Tbroad
through 2019-12-12 · source: NVD
GF
Gr297n Firmware · Sapido
through 2019-12-12 · source: NVD
HM
Hcn Max-c300n Firmware · Hcn Max-c300n Project
through 2019-12-12 · source: NVD
MF
Max-c300n Firmware · Hiwifi
through 2019-12-12 · source: NVD
MR
Mesh Router Firmware · Ciktel
through 2019-12-12 · source: NVD
NF
N100re Firmware · Totolink
through 3.4.0 · source: NVD
NF
N150rt Firmware · Totolink
through 3.4.0 · source: NVD
NF
N200re Firmware · Totolink
through 4.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-19823
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-19823
Exploit
http://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz
Exploit
http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html
Mailing List
http://seclists.org/fulldisclosure/2020/Jan/36
Exploit
http://seclists.org/fulldisclosure/2020/Jan/38
Third Party Advisory
https://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13
Third Party Advisory
https://sploit.tech
More from Mesh Router Firmware
7.5
CVE-2019-19822
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data…