Vulnerability Description
devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script. Attackers can enable telnet and remote shell services, reboot the device, and gain root access without a password by manipulating system configuration parameters.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://www.devolo.com
- https://www.exploit-db.com/exploits/46325
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5508.php
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5508.php
FAQ
What is CVE-2019-25249?
CVE-2019-25249 is a vulnerability with a CVSS score of 9.8 (CRITICAL). devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script. Attackers can enable telnet and rem...
How severe is CVE-2019-25249?
CVE-2019-25249 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-25249?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.