CVE-2019-16261

Publicada em 12 set 2019 · Atualizada em 21 mar 2025

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.8%

Tripp Lite PDUMH15AT 12.04.0053 and SU750XL 12.04.0052 devices allow unauthenticated POST requests to the /Forms/ directory, as demonstrated by changing the manager or admin password, or shutting off power to an outlet. NOTE: the vendor's position is that a newer firmware version, fixing this vulnerability, had already been released before this vulnerability report about 12.04.0053.

Produtos afetados

n/a · n/a

Referências

https://blog.korelogic.com/blog/2019/08/19/unpatched_fringe_infrastructure_bits http://seclists.org/fulldisclosure/2025/Mar/1 https://gist.github.com/Shlucus/ab762d6b148f2d2d046c956526a80ddc