cve/2019/CVE-2019-19967.md
2024-06-18 02:51:15 +02:00

669 B

CVE-2019-19967

Description

The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI.

POC

Reference

Github