CVE-2019-19967
Summary
| CVE | CVE-2019-19967 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-12-25 22:15:00 UTC |
| Updated | 2020-01-08 21:26:00 UTC |
| Description | The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI. |
Risk And Classification
Problem Types: CWE-319
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Upc | Connect Box Eurodocsis | 3.0 | All | All | All |
| Hardware | Upc | Connect Box Eurodocsis | 3.0 | All | All | All |
| Operating System | Upc | Connect Box Eurodocsis Firmware | ch7465lg-ncip-6.12.18.25-2p6-nosh | All | All | All |
| Operating System | Upc | Connect Box Eurodocsis Firmware | ch7465lg-ncip-6.12.18.25-2p6-nosh | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GitHub - filipi86/ConnectBoxDOCSIS-3.0: The Connect Box is the worldwide most compact EuroDOCSIS 3.0 Voice Gateway which provides the ideal all-in-one wired and wireless solution, designed for your home, home office, or small business/enterprise. It can be used in households with one or more computers capable of wireless connectivity for remote access to the wireless gateway. | MISC | github.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.