CVE-2019-18235 - Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack

Back Back to CVE browser

CRITICAL

Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack

Published Mar 17, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 1.54%

Description

Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack.

Affected products

Vendor n/a Product Advantech Spectre RT ERT351 Versions 5.1.3 and prior Default
unknown
Affected
- Versions 5.1.3 and prior

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Advantech Spectre RT ERT351 Versions 5.1.3 and prior	unknown	Affected Versions 5.1.3 and prior

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-307

References (3)

https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8035
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8035		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Mar 17, 2021

Updated Aug 5, 2024

Reserved Oct 22, 2019

Link CVE-2019-18235

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-18235

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Mar 17, 2021

Updated Aug 5, 2024

Link EUVD-2019-8035

GitHub

No data