PT-2019-11476 · China Mobile · Chinamobile Gpn2.4P21-C-Cn W2001En-00

Published 2019-07-19 · Updated 2020-08-24 · CVE-2019-1010136

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: ChinaMobile GPN2.4P21-C-CN W2001EN-00

Description: The issue is related to incorrect access control, allowing unauthenticated remote reboot of PLC Wireless Routers. The component affected is the reboot settings, which are available to unauthenticated users instead of only authenticated users. The attack vector is remote.

Recommendations: For ChinaMobile GPN2.4P21-C-CN W2001EN-00, restrict access to the reboot settings to only authenticated users to prevent unauthenticated remote reboot.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-1010136

Affected Products

Chinamobile Gpn2.4P21-C-Cn W2001En-00

References · 4

• 🔥 https://exploit-db.com/exploits/45187 · Exploit
• https://osv.dev/vulnerability/CVE-2019-1010136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1010136 · Security Note
• https://shodan.io/search?query=title%3APLC++pstVal-%3Evalue%3Ahtml%2Findex.html · Note