CVE-2019-6814

🗓️ 22 May 2019 19:38:32Reported by schneiderType

cve🔗 web.nvd.nist.gov👁 112 Views🌐 WEB

Improper Authentication vulnerability in NET55XX Encoder firmware

Reporter	Title	Published	Views	Family All 16
zdt	Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass Exploit	29 Jul 201900:00	–	zdt
BDU FSTEC	Pelco Endura video server Access Control Error	18 Jun 201900:00	–	bdu_fstec
Circl	CVE-2019-6814	22 May 201920:48	–	circl
CNVD	Schneider Electric NET55XX Encoder Access Control Error Vulnerability	22 May 201900:00	–	cnvd
Check Point Advisories	Schneider Electric Pelco Endura Authentication Bypass (CVE-2019-6814)	11 Aug 201900:00	–	checkpoint_advisories
Cvelist	CVE-2019-6814	22 May 201919:38	–	cvelist
Exploit DB	Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass (Metasploit)	29 Jul 201900:00	–	exploitdb
Metasploit	Schneider Electric Pelco Endura NET55XX Encoder	25 Jan 201900:00	–	metasploit
NVD	CVE-2019-6814	22 May 201920:29	–	nvd
osv_cve	CVE-2019-6814	22 May 201920:29	–	osv_cve

NVD

Vulners

Node

AND

schneider-electric net5501_firmwareRange<2.1.9.7

schneider-electric net5501Match-

Node

AND

schneider-electric net5501-i_firmwareRange<2.1.9.7

schneider-electric net5501-iMatch-

Node

AND

schneider-electric net5501-xt_firmwareRange<2.1.9.7

schneider-electric net5501-xtMatch-

Node

AND

schneider-electric net5504_firmwareRange<2.1.9.7

schneider-electric net5504Match-

Node

AND

schneider-electric net5500_firmwareRange<2.1.9.7

schneider-electric net5500Match-

Node

AND

schneider-electric net5516_firmwareRange<2.1.9.7

schneider-electric net5516Match-

Node

AND

schneider-electric net5508_firmwareRange<2.1.9.7

schneider-electric net5508Match-

[
  {
    "product": "ÊNET55XX Encoder with firmware prior to version 2.1.9.Ê",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ÊNET55XX Encoder with firmware prior to version 2.1.9.Ê"
      }
    ]
  }
]

Source	Link
se	www.se.com/ww/en/download/document/SEVD-2019-134-01/

Parameter	Position	Path	Description	CWE
enable	request body	/cgi-bin/webra.fcgi?network/ssh	Exploits inadequate access controls in the webUI to enable SSH and change the root password via POST to /cgi-bin/webra.fcgi?network/ssh with a JSON body.	CWE-287
passwd	request body	/cgi-bin/webra.fcgi?network/ssh	Exploits inadequate access controls in the webUI to enable SSH and change the root password via POST to /cgi-bin/webra.fcgi?network/ssh with a JSON body.	CWE-287
userid	request body	/cgi-bin/webra.fcgi?network/ssh	Exploits inadequate access controls in the webUI to enable SSH and change the root password via POST to /cgi-bin/webra.fcgi?network/ssh with a JSON body.	CWE-287

17 Jun 2026 02:39Current

9.3Critical risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.19.8

EPSS0.3665