Lucene search
PRIOn knowledge basePRION:CVE-2019-13140HistorySep 16, 2019 - 5:15 p.m.
Design/Logic Flaw
2019-09-1617:15:00
PRIOn knowledge base
www.prio-n.com
2
0.054 Low
EPSS
Percentile
93.2%
Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the “user” account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eg200_firmware | eq | eg200wu7p1uadamo3.16.41902261650 |
Related
packetstorm
packetstorm
Inteno IOPSYS Gateway 3DES Key Extraction Improper Access
2019-09-16 00:00:00
exploitpack
exploitpack
Inteno IOPSYS Gateway - Improper Access Restrictions
2019-09-16 00:00:00
cve
cve
CVE-2019-13140
2019-09-16 17:15:13
exploitdb
exploitdb
Inteno IOPSYS Gateway - Improper Access Restrictions
2019-09-16 00:00:00
cvelist
cvelist
CVE-2019-13140
2019-09-16 16:24:48
nvd
nvd
CVE-2019-13140
2019-09-16 17:15:13
zdt
zdt
Inteno IOPSYS Gateway - Improper Access Restrictions Vulnerability
2019-09-16 00:00:00