Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-6451 Details

On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/cvereveal/CVEs/tree/master/CVE-2019-6451	CVE	ExploitThird Party Advisory
https://www.soyal.com/exhibition/cve-2019-6451/	CVE	Broken Link
https://www.soyal.com.tw/cve-2019-6451/	CVE	Vendor Advisory
http://www.nccst.nat.gov.tw	CVE	Broken LinkThird Party Advisory
http://www.soyal.com/epaper/e-paper-en-117.html	CVE	Broken Link
https://github.com/cvereveal/CVEs/tree/master/CVE-2019-6451	[email protected]	ExploitThird Party Advisory
https://www.soyal.com/exhibition/cve-2019-6451/	[email protected]	Broken Link
https://www.soyal.com.tw/cve-2019-6451/	[email protected]	Vendor Advisory
http://www.nccst.nat.gov.tw	[email protected]	Broken LinkThird Party Advisory
http://www.soyal.com/epaper/e-paper-en-117.html	[email protected]	Broken Link

CWE-ID	CWE Name	Source
CWE-306	Missing Authentication for Critical Function	[email protected]

Product	Versions
soyal ar-727h firmware	All versions
CPE cpe:2.3:o:soyal:ar-727h_firmware:-:::::::* Remediation No remediation found in references.
soyal ar-727h	All versions
CPE cpe:2.3:h:soyal:ar-727h:-:::::::* Remediation No remediation found in references.
soyal ar-829ev5 firmware	All versions
CPE cpe:2.3:o:soyal:ar-829ev5_firmware:-:::::::* Remediation No remediation found in references.
soyal ar-829ev5	All versions
CPE cpe:2.3:h:soyal:ar-829ev5:-:::::::* Remediation No remediation found in references.

8 change records found show changes

QUICK INFO