CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-19824

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and N302RE 2.0.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.937

EPSS Ranking 99.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2019-19824

Totolink » A3002ru » Version: N/A

cpe:2.3:h:totolink:a3002ru:-
Totolink » A702r » Version: N/A

cpe:2.3:h:totolink:a702r:-
Totolink » N100re » Version: N/A

cpe:2.3:h:totolink:n100re:-
Totolink » N150rt » Version: N/A

cpe:2.3:h:totolink:n150rt:-
Totolink » N200re » Version: N/A

cpe:2.3:h:totolink:n200re:-
Totolink » N300rt » Version: N/A

cpe:2.3:h:totolink:n300rt:-
Totolink » N301rt » Version: N/A

cpe:2.3:h:totolink:n301rt:-
Totolink » N302r » Version: N/A

cpe:2.3:h:totolink:n302r:-
Totolink » A3002ru Firmware » Version: N/A

cpe:2.3:o:totolink:a3002ru_firmware:-
Totolink » A3002ru Firmware » Version: 1.0.8

cpe:2.3:o:totolink:a3002ru_firmware:1.0.8
Totolink » A3002ru Firmware » Version: 2.0.0

cpe:2.3:o:totolink:a3002ru_firmware:2.0.0
Totolink » A702r Firmware » Version: N/A

cpe:2.3:o:totolink:a702r_firmware:-
Totolink » A702r Firmware » Version: 1.0.0-b20161227.1023

cpe:2.3:o:totolink:a702r_firmware:1.0.0-b20161227.1023
Totolink » A702r Firmware » Version: 2.1.3

cpe:2.3:o:totolink:a702r_firmware:2.1.3
Totolink » N100re Firmware » Version: N/A

cpe:2.3:o:totolink:n100re_firmware:-
Totolink » N100re Firmware » Version: 2.0

cpe:2.3:o:totolink:n100re_firmware:2.0
Totolink » N100re Firmware » Version: 3.4.0

cpe:2.3:o:totolink:n100re_firmware:3.4.0
Totolink » N150rt Firmware » Version: N/A

cpe:2.3:o:totolink:n150rt_firmware:-
Totolink » N150rt Firmware » Version: 3.4.0

cpe:2.3:o:totolink:n150rt_firmware:3.4.0
Totolink » N200re Firmware » Version: N/A

cpe:2.3:o:totolink:n200re_firmware:-
Totolink » N200re Firmware » Version: 2.0

cpe:2.3:o:totolink:n200re_firmware:2.0
Totolink » N200re Firmware » Version: 4.0.0

cpe:2.3:o:totolink:n200re_firmware:4.0.0
Totolink » N300rt Firmware » Version: N/A

cpe:2.3:o:totolink:n300rt_firmware:-
Totolink » N300rt Firmware » Version: 3.2.4-b20180730.0906

cpe:2.3:o:totolink:n300rt_firmware:3.2.4-b20180730.0906
Totolink » N300rt Firmware » Version: 3.4.0

cpe:2.3:o:totolink:n300rt_firmware:3.4.0
Totolink » N301rt Firmware » Version: N/A

cpe:2.3:o:totolink:n301rt_firmware:-
Totolink » N301rt Firmware » Version: 2.1.6

cpe:2.3:o:totolink:n301rt_firmware:2.1.6
Totolink » N302r Firmware » Version: N/A

cpe:2.3:o:totolink:n302r_firmware:-
Totolink » N302r Firmware » Version: 3.4.0

cpe:2.3:o:totolink:n302r_firmware:3.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-19824

Products

Pricing

Contact Us