CVE-2019-16651

2021-09-2013:26:26

mitre

www.cve.org

virgin media

snmp

vulnerability

wan ip

javascript

dns rebinding

vpn

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

38.8%

JSON

An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a user (if they are using certain VPN implementations, this would decloak them).