CVE-2019-19823 : A certain router administration interface (that includes Realtek APMIB 0.11f for

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.

Published 2020-01-27 18:15:13

Updated 2020-02-06 16:04:39

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2019-19823

Realtek » Rtk 11n Ap Firmware
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:realtek:rtk_11n_ap_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Realtek » Rtk 11n Ap » Version: N/A
Iodata » Wn-ac1167r Firmwre
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:iodata:wn-ac1167r_firmwre:*:*:*:*:*:*:*:*
Matching versions
When used together with: Iodata » Wn-ac1167r » Version: N/A
Totolink » A3002ru Firmware
Versions up to, including, (<=) 2.0.0
cpe:2.3:o:totolink:a3002ru_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Totolink » A3002ru » Version: N/A
Totolink » A702r Firmware
Versions up to, including, (<=) 2.1.3
cpe:2.3:o:totolink:a702r_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Totolink » A702r » Version: N/A
Totolink » N301rt Firmware
Versions up to, including, (<=) 2.1.6
cpe:2.3:o:totolink:n301rt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Totolink » N301rt » Version: N/A
Totolink » N302r Firmware
Versions up to, including, (<=) 3.4.0
cpe:2.3:o:totolink:n302r_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Totolink » N302r » Version: N/A
Totolink » N300rt Firmware
Versions up to, including, (<=) 3.4.0
cpe:2.3:o:totolink:n300rt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Totolink » N300rt » Version: N/A
Totolink » N200re Firmware
Versions up to, including, (<=) 4.0.0
cpe:2.3:o:totolink:n200re_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Totolink » N200re » Version: N/A
Totolink » N150rt Firmware
Versions up to, including, (<=) 3.4.0
cpe:2.3:o:totolink:n150rt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Totolink » N150rt » Version: N/A
Totolink » N100re Firmware
Versions up to, including, (<=) 3.4.0
cpe:2.3:o:totolink:n100re_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Totolink » N100re » Version: N/A
Coship » Emta Ap Firmwre
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:coship:emta_ap_firmwre:*:*:*:*:*:*:*:*
Matching versions
When used together with: Coship » Emta Ap » Version: N/A
Sapido » Gr297n Firmware
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:sapido:gr297n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Sapido » Gr297n » Version: N/A
Ciktel » Mesh Router Firmware
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:ciktel:mesh_router_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ciktel » Mesh Router » Version: N/A
Kctvjeju » Wireless Ap Firmware
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:kctvjeju:wireless_ap_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Kctvjeju » Wireless Ap » Version: N/A
Fg-products » Fgn-r2 Firmware
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:fg-products:fgn-r2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Fg-products » Fgn-r2 » Version: N/A
Hiwifi » Max-c300n Firmware
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:hiwifi:max-c300n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hiwifi » Max-c300n » Version: N/A
Tbroad » Gn-866ac Firmware
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:tbroad:gn-866ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Tbroad » Gn-866ac » Version: N/A
Hcn Max-c300n Project » Hcn Max-c300n Firmware
Versions up to, including, (<=) 2019-12-12
cpe:2.3:o:hcn_max-c300n_project:hcn_max-c300n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hcn Max-c300n Project » Hcn Max-c300n » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-19823

EPSS FAQ

1.36%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-19823

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2019-19823

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-19823

http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html

Realtek SDK Information Disclosure / Code Execution ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry

CVEs referencing this url
http://seclists.org/fulldisclosure/2020/Jan/38

Full Disclosure: Re: Multiple vulnerabilities in TOTOLINK and other Realtek SDK based routers
Exploit;Mailing List;Third Party Advisory

CVEs referencing this url
http://seclists.org/fulldisclosure/2020/Jan/36

Full Disclosure: Multiple vulnerabilities in TOTOLINK and other Realtek SDK based routers
Mailing List;Third Party Advisory

CVEs referencing this url
http://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz

Exploit;Third Party Advisory

CVEs referencing this url
https://sploit.tech

sploit.tech
Third Party Advisory

CVEs referencing this url
https://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13

wecb/apmib.h at 755ce19a493c78270c04b5aaf39664f0cddbb420 · Saturn49/wecb · GitHub
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2019-19823

Products affected by CVE-2019-19823

Exploit prediction scoring system (EPSS) score for CVE-2019-19823

CVSS scores for CVE-2019-19823

CWE ids for CVE-2019-19823

References for CVE-2019-19823