CVE-2019-19823

🗓️ 27 Jan 2020 17:49:21Reported by mitreType

A router admin interface (Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext passwords in flash memory and file, affecting various router models. CVE-2019-19823

Reporter	Title	Published	Views	Family All 9
0day.today	Realtek SDK Information Disclosure / Code Execution Exploit	27 Jan 202000:00	–	zdt
Circl	CVE-2019-19823	20 Nov 202511:50	–	circl
Cvelist	CVE-2019-19823	27 Jan 202017:49	–	cvelist
EUVD	EUVD-2019-9421	7 Oct 202500:30	–	euvd
Nuclei	TOTOLINK/Realtek Routers - Information Disclosure	6 Jun 202603:01	–	nuclei
NVD	CVE-2019-19823	27 Jan 202018:15	–	nvd
Packet Storm	Realtek SDK Information Disclosure / Code Execution	24 Jan 202000:00	–	packetstorm
Prion	Design/Logic Flaw	27 Jan 202018:15	–	prion
RedhatCVE	CVE-2019-19823	22 May 202510:09	–	redhatcve

NVD

Node

totolink a3002ru_firmwareRange≤2.0.0

AND

totolink a3002ruMatch-

Node

totolink a702r_firmwareRange≤2.1.3

AND

totolink a702rMatch-

Node

totolink n302r_firmwareRange≤3.4.0

AND

totolink n302rMatch-

Node

totolink n300rt_firmwareRange≤3.4.0

AND

totolink n300rtMatch-

Node

totolink n200re_firmwareRange≤4.0.0

AND

totolink n200reMatch-

Node

totolink n150rt_firmwareRange≤3.4.0

AND

totolink n150rtMatch-

Node

totolink n100re_firmwareRange≤3.4.0

AND

totolink n100reMatch-

Node

realtek rtk_11n_ap_firmwareRange≤2019-12-12

AND

realtek rtk_11n_apMatch-

Node

sapido gr297n_firmwareRange≤2019-12-12

AND

sapido gr297nMatch-

Node

ciktel mesh_router_firmwareRange≤2019-12-12

AND

ciktel mesh_routerMatch-

Node

kctvjeju wireless_ap_firmwareRange≤2019-12-12

AND

kctvjeju wireless_apMatch-

Node

fg-products fgn-r2_firmwareRange≤2019-12-12

AND

fg-products fgn-r2Match-

Node

hiwifi max-c300n_firmwareRange≤2019-12-12

AND

hiwifi max-c300nMatch-

Node

tbroad gn-866ac_firmwareRange≤2019-12-12

AND

tbroad gn-866acMatch-

Node

coship emta_ap_firmwreRange≤2019-12-12

AND

coship emta_apMatch-

Node

iodata wn-ac1167r_firmwreRange≤2019-12-12

AND

iodata wn-ac1167rMatch-

Node

hcn_max-c300n_project hcn_max-c300n_firmwareRange≤2019-12-12

AND

hcn_max-c300n_project hcn_max-c300nMatch-

Node

totolink n301rt_firmwareRange≤2.1.6

AND

totolink n301rtMatch-

Source	Link
seclists	www.seclists.org/fulldisclosure/2020/Jan/38
sploit	www.sploit.tech/
opensource	www.opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz
seclists	www.seclists.org/fulldisclosure/2020/Jan/36
packetstormsecurity	www.packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html
github	www.github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h

21 Nov 2024 04:35Current

7.9High risk

Vulners AI Score7.9

CVSS 25

CVSS 3.17.5

EPSS0.28658

CWE-522