Lucene search
MitreCVELIST:CVE-2019-13140HistorySep 16, 2019 - 4:24 p.m.
CVE-2019-13140
2019-09-1616:24:48
mitre
www.cve.org
0.054 Low
EPSS
Percentile
93.2%
Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the “user” account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.
Related
packetstorm
packetstorm
Inteno IOPSYS Gateway 3DES Key Extraction Improper Access
2019-09-16 00:00:00
exploitpack
exploitpack
Inteno IOPSYS Gateway - Improper Access Restrictions
2019-09-16 00:00:00
cve
cve
CVE-2019-13140
2019-09-16 17:15:13
exploitdb
exploitdb
Inteno IOPSYS Gateway - Improper Access Restrictions
2019-09-16 00:00:00
prion
prion
Design/Logic Flaw
2019-09-16 17:15:00
zdt
zdt
Inteno IOPSYS Gateway - Improper Access Restrictions Vulnerability
2019-09-16 00:00:00
nvd
nvd
CVE-2019-13140
2019-09-16 17:15:13