CVE-2019-6814

🗓️ 22 May 2019 19:38:32Reported by schneiderType

cve🔗 web.nvd.nist.gov👁 91 Views🌐 WEB

Improper Authentication vulnerability in NET55XX Encoder firmware

Reporter	Title	Published	Views	Family All 15
0day.today	Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass Exploit	29 Jul 201900:00	–	zdt
BDU FSTEC	The vulnerability of Pelco Endura video server microprogramming software, related to access control errors, allows intruders to compromise the confidentiality, integrity, and accessibility of protected information.	18 Jun 201900:00	–	bdu_fstec
Circl	CVE-2019-6814	22 May 201920:48	–	circl
CNVD	Schneider Electric NET55XX Encoder Access Control Error Vulnerability	22 May 201900:00	–	cnvd
Check Point Advisories	Schneider Electric Pelco Endura Authentication Bypass (CVE-2019-6814)	11 Aug 201900:00	–	checkpoint_advisories
Cvelist	CVE-2019-6814	22 May 201919:38	–	cvelist
Exploit DB	Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass (Metasploit)	29 Jul 201900:00	–	exploitdb
Metasploit	Schneider Electric Pelco Endura NET55XX Encoder	11 Jul 201918:10	–	metasploit
NVD	CVE-2019-6814	22 May 201920:29	–	nvd
OSV	CVE-2019-6814	22 May 201920:29	–	osv

NVD

Node

schneider-electric net5501_firmwareRange<2.1.9.7

AND

schneider-electric net5501Match-

Node

schneider-electric net5501-i_firmwareRange<2.1.9.7

AND

schneider-electric net5501-iMatch-

Node

schneider-electric net5501-xt_firmwareRange<2.1.9.7

AND

schneider-electric net5501-xtMatch-

Node

schneider-electric net5504_firmwareRange<2.1.9.7

AND

schneider-electric net5504Match-

Node

schneider-electric net5500_firmwareRange<2.1.9.7

AND

schneider-electric net5500Match-

Node

schneider-electric net5516_firmwareRange<2.1.9.7

AND

schneider-electric net5516Match-

Node

schneider-electric net5508_firmwareRange<2.1.9.7

AND

schneider-electric net5508Match-

[
  {
    "product": "ÊNET55XX Encoder with firmware prior to version 2.1.9.Ê",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ÊNET55XX Encoder with firmware prior to version 2.1.9.Ê"
      }
    ]
  }
]

Source	Link
se	www.se.com/ww/en/download/document/SEVD-2019-134-01/

Parameter	Position	Path	Description	CWE
enable	request body	cgi-bin/webra.fcgi?network/ssh	Unauthenticated webUI endpoint to change root password via POST JSON to enable SSH	CWE-287
passwd	request body	cgi-bin/webra.fcgi?network/ssh	Unauthenticated webUI endpoint to change root password via POST JSON to enable SSH	CWE-287
userid	request body	cgi-bin/webra.fcgi?network/ssh	Unauthenticated webUI endpoint to change root password via POST JSON to enable SSH	CWE-287

17 Jun 2026 02:39Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.19.8

EPSS0.3665

CWE-287