CVE-2019-19822
HighA certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords).
Published Jan 27, 2020 · Updated Nov 21, 2024
Key Facts
Patch in the next maintenance window- CVE-2019-19822 is a high-severity vulnerability (CVSS 7.5 v3.1) affecting Mesh Router Firmware (Ciktel), Emta Ap Firmwre (Coship), Fgn-R2 Firmware (Fg-Products) and 15 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 8.7% probability of exploitation in the next 30 days.
- Fixed versions are available, including Mesh Router Firmware <=2019-12-12, Emta Ap Firmwre <=2019-12-12, Fgn-R2 Firmware <=2019-12-12.
- Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS (30-day exploit likelihood)
8.7%
Higher than 95.0% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2019-19822 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.
Affected Products
18 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Mesh Router FirmwareCiktel | See advisory | 2019-12-12 |
| Emta Ap FirmwreCoship | See advisory | 2019-12-12 |
| Fgn-R2 FirmwareFg-Products | See advisory | 2019-12-12 |
| Hcn Max-C300n FirmwareHcn Max-C300n Project | See advisory | 2019-12-12 |
| Max-C300n FirmwareHiwifi | See advisory | 2019-12-12 |
Patched Releases
Mesh Router Firmware
<=2019-12-12
Emta Ap Firmwre
<=2019-12-12
Fgn-R2 Firmware
<=2019-12-12
Hcn Max-C300n Firmware
<=2019-12-12
Max-C300n Firmware
<=2019-12-12
Wn-Ac1167r Firmwre
<=2019-12-12
Wireless Ap Firmware
<=2019-12-12
Rtk 11n Ap Firmware
<=2019-12-12
Gr297n Firmware
<=2019-12-12
Gn-866ac Firmware
<=2019-12-12
A3002ru Firmware
<=2.0.0
A702r Firmware
<=2.1.3
N100re Firmware
<=3.4.0
N150rt Firmware
<=3.4.0
N200re Firmware
<=4.0.0
N300rt Firmware
<=3.4.0
N301rt Firmware
<=2.1.6
N302r Firmware
<=3.4.0
Timeline
Publicly disclosed
Jan 27, 2020
Last updated
Nov 21, 2024
Weakness Type
- CWE-306 Missing Authentication for Critical Function
References
- advisory20200124 Multiple vulnerabilities in TOTOLINK and other Realtek SDK based routers
- advisoryhttps://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13
- advisoryhttps://sploit.tech
- exploithttp://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz
- exploithttp://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html
FAQ
Common Questions.
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords).
Affected: Mesh Router Firmware (Ciktel); Emta Ap Firmwre (Coship); Fgn-R2 Firmware (Fg-Products), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Mesh Router Firmware <=2019-12-12, Emta Ap Firmwre <=2019-12-12, Fgn-R2 Firmware <=2019-12-12.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Is CVE-2019-19822 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo