cbcvebase.

Intenogroup Eg200 Firmware vulnerabilities

1 known vulnerability affecting intenogroup/eg200_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2019-13140P3MEDIUMCVSS 6.5PoCveg200-wu7p1u_adamo3.16.4-190226_16502019-09-16
CVE-2019-13140 [MEDIUM] CWE-552 CVE-2019-13140: Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allo Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.
nvd
Intenogroup Eg200 Firmware vulnerabilities | cvebase