CVE-2019-19824
Realtek SDK Information Disclosure / Code Execution
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
4Exploited in Wild
-Decision
Descriptions
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.
En determinados enrutadores basados ??en TOTOLINK Realtek SDK, un atacante autenticado puede ejecutar comandos arbitrarios de Sistema Operativo por medio del parámetro sysCmd en el URI boafrm/formSysCmd, inclusive si la GUI (syscmd.htm) no está disponible. Esto permite un control total sobre los internos del dispositivo. Esto afecta a A3002RU versiones hasta 2.0.0, A702R versiones hasta 2.1.3, N301RT versiones hasta 2.1.6, N302R versiones hasta 3.4.0, N300RT versiones hasta 3.4.0, N200RE versiones hasta 4.0.0, N150RT versiones hasta 3.4.0 y N100RE versiones hasta 3.4.0.
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and N302RE 2.0.2.
Realtek SDK based routers suffer from information disclosure, incorrect access control, insecure password storage, code execution, and incorrectly implemented CAPTCHA vulnerabilities.
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2019-12-16 CVE Reserved
- 2020-01-24 CVE Published
- 2024-08-28 CVE Updated
- 2024-08-28 First Exploit
- 2024-08-29 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (5)
| URL | Date | SRC |
|---|---|---|
| http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html | 2024-08-28 | |
| http://seclists.org/fulldisclosure/2020/Jan/36 | 2024-08-28 | |
| http://seclists.org/fulldisclosure/2020/Jan/38 | 2024-08-28 | |
| https://sploit.tech | 2024-08-28 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Totolink Search vendor "Totolink" | A3002ru Firmware Search vendor "Totolink" for product "A3002ru Firmware" | <= 2.0.0 Search vendor "Totolink" for product "A3002ru Firmware" and version " <= 2.0.0" | - |
Affected
| in | Totolink Search vendor "Totolink" | A3002ru Search vendor "Totolink" for product "A3002ru" | - | - |
Safe
|
| Totolink Search vendor "Totolink" | A702r Firmware Search vendor "Totolink" for product "A702r Firmware" | <= 2.1.3 Search vendor "Totolink" for product "A702r Firmware" and version " <= 2.1.3" | - |
Affected
| in | Totolink Search vendor "Totolink" | A702r Search vendor "Totolink" for product "A702r" | - | - |
Safe
|
| Totolink Search vendor "Totolink" | N301rt Firmware Search vendor "Totolink" for product "N301rt Firmware" | <= 2.1.6 Search vendor "Totolink" for product "N301rt Firmware" and version " <= 2.1.6" | - |
Affected
| in | Totolink Search vendor "Totolink" | N301rt Search vendor "Totolink" for product "N301rt" | - | - |
Safe
|
| Totolink Search vendor "Totolink" | N302r Firmware Search vendor "Totolink" for product "N302r Firmware" | <= 3.4.0 Search vendor "Totolink" for product "N302r Firmware" and version " <= 3.4.0" | - |
Affected
| in | Totolink Search vendor "Totolink" | N302r Search vendor "Totolink" for product "N302r" | - | - |
Safe
|
| Totolink Search vendor "Totolink" | N300rt Firmware Search vendor "Totolink" for product "N300rt Firmware" | <= 3.4.0 Search vendor "Totolink" for product "N300rt Firmware" and version " <= 3.4.0" | - |
Affected
| in | Totolink Search vendor "Totolink" | N300rt Search vendor "Totolink" for product "N300rt" | - | - |
Safe
|
| Totolink Search vendor "Totolink" | N200re Firmware Search vendor "Totolink" for product "N200re Firmware" | <= 4.0.0 Search vendor "Totolink" for product "N200re Firmware" and version " <= 4.0.0" | - |
Affected
| in | Totolink Search vendor "Totolink" | N200re Search vendor "Totolink" for product "N200re" | - | - |
Safe
|
| Totolink Search vendor "Totolink" | N150rt Firmware Search vendor "Totolink" for product "N150rt Firmware" | <= 3.4.0 Search vendor "Totolink" for product "N150rt Firmware" and version " <= 3.4.0" | - |
Affected
| in | Totolink Search vendor "Totolink" | N150rt Search vendor "Totolink" for product "N150rt" | - | - |
Safe
|
| Totolink Search vendor "Totolink" | N100re Firmware Search vendor "Totolink" for product "N100re Firmware" | <= 3.4.0 Search vendor "Totolink" for product "N100re Firmware" and version " <= 3.4.0" | - |
Affected
| in | Totolink Search vendor "Totolink" | N100re Search vendor "Totolink" for product "N100re" | - | - |
Safe
|