CVE-2019-19967
CVE-2019-19967
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →