Vulnerability Details CVE-2019-6451
On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.nccst.nat.gov.tw
- http://www.soyal.com/epaper/e-paper-en-117.html
- https://github.com/cvereveal/CVEs/tree/master/CVE-2019-6451
- https://www.soyal.com.tw/cve-2019-6451/
- https://www.soyal.com/exhibition/cve-2019-6451/
- http://www.nccst.nat.gov.tw
- http://www.soyal.com/epaper/e-paper-en-117.html
- https://github.com/cvereveal/CVEs/tree/master/CVE-2019-6451
- https://www.soyal.com.tw/cve-2019-6451/
- https://www.soyal.com/exhibition/cve-2019-6451/
Products affected by CVE-2019-6451
-
cpe:2.3:h:soyal:ar-727h:-
-
cpe:2.3:h:soyal:ar-829ev5:-
-
cpe:2.3:o:soyal:ar-727h_firmware:-
-
cpe:2.3:o:soyal:ar-829ev5_firmware:-