CVE-2019-16340 — CRITICAL (9.8)

Vulnerability Description

Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cgi URI.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Linksys	Velop Whw0303 Firmware	1.1.8.192419
Linksys	Velop Whw0303	-
Linksys	Velop Whw0302 Firmware	1.1.8.192419
Linksys	Velop Whw0302	-
Linksys	Velop Whw0301 Firmware	1.1.8.192419
Linksys	Velop Whw0301	-

Related Weaknesses (CWE)

CWE-425

References

http://s3.amazonaws.com/downloads.linksys.com/support/assets/releasenotes/WHW03_Third Party Advisory
https://puzzor.github.io/Linksys-Velop-Authentication-bypassExploitThird Party Advisory
https://www.linksys.com/us/support-article?articleNum=207568PatchThird Party Advisory
http://s3.amazonaws.com/downloads.linksys.com/support/assets/releasenotes/WHW03_Third Party Advisory
https://puzzor.github.io/Linksys-Velop-Authentication-bypassExploitThird Party Advisory
https://www.linksys.com/us/support-article?articleNum=207568PatchThird Party Advisory

FAQ

What is CVE-2019-16340?

CVE-2019-16340 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cgi URI.

How severe is CVE-2019-16340?

CVE-2019-16340 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-16340?

Check the references section above for vendor advisories and patch information. Affected products include: Linksys Velop Whw0303 Firmware, Linksys Velop Whw0303, Linksys Velop Whw0302 Firmware, Linksys Velop Whw0302, Linksys Velop Whw0301 Firmware.