VulnerabilityModified

CVE-2019-19824

HIGH 8.8EPSS 25.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 25.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and N302RE 2.0.2.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 25.14% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-78
Affected: totolink/a3002ru firmware · totolink/a702r firmware · totolink/n301rt firmware · totolink/n302r firmware · totolink/n300rt firmware · totolink/n200re firmware · totolink/n150rt firmware · totolink/n100re firmware
Source: cve@mitre.org

References

http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2020/Jan/36Exploit, Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2020/Jan/38Exploit, Mailing List, Third Party Advisory
https://github.com/yckuo-sdc/totolink-boa-api-vulnerabilities
https://sploit.techExploit, Third Party Advisory
http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2020/Jan/36Exploit, Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2020/Jan/38Exploit, Mailing List, Third Party Advisory
https://sploit.techExploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.