VulnerabilityModified
CVE-2019-7564
By making a POST request to the regx/wireless/wl_security_2G.asp URI, the attacker can change the password of the Wi-FI network.
CRITICAL 9.8EPSS 3.05%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.05%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wl_security_2G.asp URI, the attacker can change the password of the Wi-FI network.
- CVSS 3.0
- 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 3.05% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-306
- Affected
- coship/rt3052 firmware · coship/rt3050 firmware · coship/wm3300 firmware · coship/rt7620 firmware
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/151595/Coship-Wireless-Router-4.0.0.x-5.0.0.x-Authentication-Bypass.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/151595/Coship-Wireless-Router-4.0.0.x-5.0.0.x-Authentication-Bypass.htmlExploit, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.