CoreCVE
Back

CRITICAL

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation

Published Oct 2, 2019

Description

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTTP) request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable modem.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-669

CWE-78

OS Command Injection

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Oct 2, 2019
Updated Aug 4, 2024
Reserved Jun 28, 2019
Link CVE-2019-13025
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-13025
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-13025
ENISA EUVD
Assigner mitre
Published Oct 2, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-4593
EUVD-2019-4593