Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-19822 Details

Description

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz	CVE	ExploitThird Party Advisory
http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html	CVE	ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2020/Jan/36	CVE	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2020/Jan/38	CVE	ExploitMailing ListThird Party Advisory
https://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13	CVE	Third Party Advisory
https://sploit.tech	CVE	Third Party Advisory
http://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz	[email protected]	ExploitThird Party Advisory
http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html	[email protected]	ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2020/Jan/36	[email protected]	Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2020/Jan/38	[email protected]	ExploitMailing ListThird Party Advisory
https://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13	[email protected]	Third Party Advisory
https://sploit.tech	[email protected]	Third Party Advisory

see all 12 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-306	Missing Authentication for Critical Function	[email protected]

Affected Products

Product	Versions
totolink a3002ru firmware	<= 2.0.0
CPE cpe:2.3:o:totolink:a3002ru_firmware:::::::: Remediation No remediation found in references.
totolink a3002ru	All versions
CPE cpe:2.3:h:totolink:a3002ru:-:::::::* Remediation No remediation found in references.
totolink a702r firmware	<= 2.1.3
CPE cpe:2.3:o:totolink:a702r_firmware:::::::: Remediation No remediation found in references.
totolink a702r	All versions
CPE cpe:2.3:h:totolink:a702r:-:::::::* Remediation No remediation found in references.
totolink n302r firmware	<= 3.4.0
CPE cpe:2.3:o:totolink:n302r_firmware:::::::: Remediation No remediation found in references.
totolink n302r	All versions
CPE cpe:2.3:h:totolink:n302r:-:::::::* Remediation No remediation found in references.
totolink n300rt firmware	<= 3.4.0
CPE cpe:2.3:o:totolink:n300rt_firmware:::::::: Remediation No remediation found in references.
totolink n300rt	All versions
CPE cpe:2.3:h:totolink:n300rt:-:::::::* Remediation No remediation found in references.
totolink n200re firmware	<= 4.0.0
CPE cpe:2.3:o:totolink:n200re_firmware:::::::: Remediation No remediation found in references.
totolink n200re	All versions
CPE cpe:2.3:h:totolink:n200re:-:::::::* Remediation No remediation found in references.
totolink n150rt firmware	<= 3.4.0
CPE cpe:2.3:o:totolink:n150rt_firmware:::::::: Remediation No remediation found in references.
totolink n150rt	All versions
CPE cpe:2.3:h:totolink:n150rt:-:::::::* Remediation No remediation found in references.
totolink n100re firmware	<= 3.4.0
CPE cpe:2.3:o:totolink:n100re_firmware:::::::: Remediation No remediation found in references.
totolink n100re	All versions
CPE cpe:2.3:h:totolink:n100re:-:::::::* Remediation No remediation found in references.
realtek rtk 11n ap firmware	<= 2019-12-12
CPE cpe:2.3:o:realtek:rtk_11n_ap_firmware:::::::: Remediation No remediation found in references.
realtek rtk 11n ap	All versions
CPE cpe:2.3:h:realtek:rtk_11n_ap:-:::::::* Remediation No remediation found in references.
sapido gr297n firmware	<= 2019-12-12
CPE cpe:2.3:o:sapido:gr297n_firmware:::::::: Remediation No remediation found in references.
sapido gr297n	All versions
CPE cpe:2.3:h:sapido:gr297n:-:::::::* Remediation No remediation found in references.
ciktel mesh router firmware	<= 2019-12-12
CPE cpe:2.3:o:ciktel:mesh_router_firmware:::::::: Remediation No remediation found in references.
ciktel mesh router	All versions
CPE cpe:2.3:h:ciktel:mesh_router:-:::::::* Remediation No remediation found in references.
kctvjeju wireless ap firmware	<= 2019-12-12
CPE cpe:2.3:o:kctvjeju:wireless_ap_firmware:::::::: Remediation No remediation found in references.
kctvjeju wireless ap	All versions
CPE cpe:2.3:h:kctvjeju:wireless_ap:-:::::::* Remediation No remediation found in references.
fg-products fgn-r2 firmware	<= 2019-12-12
CPE cpe:2.3:o:fg-products:fgn-r2_firmware:::::::: Remediation No remediation found in references.
fg-products fgn-r2	All versions
CPE cpe:2.3:h:fg-products:fgn-r2:-:::::::* Remediation No remediation found in references.
hiwifi max-c300n firmware	<= 2019-12-12
CPE cpe:2.3:o:hiwifi:max-c300n_firmware:::::::: Remediation No remediation found in references.
hiwifi max-c300n	All versions
CPE cpe:2.3:h:hiwifi:max-c300n:-:::::::* Remediation No remediation found in references.
tbroad gn-866ac firmware	<= 2019-12-12
CPE cpe:2.3:o:tbroad:gn-866ac_firmware:::::::: Remediation No remediation found in references.
tbroad gn-866ac	All versions
CPE cpe:2.3:h:tbroad:gn-866ac:-:::::::* Remediation No remediation found in references.
coship emta ap firmwre	<= 2019-12-12
CPE cpe:2.3:o:coship:emta_ap_firmwre:::::::: Remediation No remediation found in references.
coship emta ap	All versions
CPE cpe:2.3:h:coship:emta_ap:-:::::::* Remediation No remediation found in references.
iodata wn-ac1167r firmwre	<= 2019-12-12
CPE cpe:2.3:o:iodata:wn-ac1167r_firmwre:::::::: Remediation No remediation found in references.
iodata wn-ac1167r	All versions
CPE cpe:2.3:h:iodata:wn-ac1167r:-:::::::* Remediation No remediation found in references.
hcn max-c300n project hcn max-c300n firmware	<= 2019-12-12
CPE cpe:2.3:o:hcn_max-c300n_project:hcn_max-c300n_firmware:::::::: Remediation No remediation found in references.
hcn max-c300n project hcn max-c300n	All versions
CPE cpe:2.3:h:hcn_max-c300n_project:hcn_max-c300n:-:::::::* Remediation No remediation found in references.
totolink n301rt firmware	<= 2.1.6
CPE cpe:2.3:o:totolink:n301rt_firmware:::::::: Remediation No remediation found in references.
totolink n301rt	All versions
CPE cpe:2.3:h:totolink:n301rt:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Aug 24, 2020	CWE Remap	[email protected]
Feb 6, 2020	Initial Analysis	[email protected]
Feb 1, 2020	CVE Modified	[email protected]

CVE-2019-19822 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO