PT-2019-11476 · China Mobile · Chinamobile Gpn2.4P21-C-Cn W2001En-00

Publicado 2019-07-19 · Atualizado 2020-08-24 · CVE-2019-1010136

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: ChinaMobile GPN2.4P21-C-CN W2001EN-00

Description: The issue is related to incorrect access control, allowing unauthenticated remote reboot of PLC Wireless Routers. The component affected is the reboot settings, which are available to unauthenticated users instead of only authenticated users. The attack vector is remote.

Recommendations: For ChinaMobile GPN2.4P21-C-CN W2001EN-00, restrict access to the reboot settings to only authenticated users to prevent unauthenticated remote reboot.

Exploit

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2019-1010136

Produtos afetados

Chinamobile Gpn2.4P21-C-Cn W2001En-00

Referências · 4

• 🔥 https://exploit-db.com/exploits/45187 · Exploit
• https://osv.dev/vulnerability/CVE-2019-1010136 · Aviso do Fabricante
• https://shodan.io/search?query=title%3APLC++pstVal-%3Evalue%3Ahtml%2Findex.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1010136 · Nota de Segurança