PT-2019-12195 · Shenzhen Yunni Technology · Ilnkp2P

Paul Marrapese · Published 2019-04-26 · Updated 2021-07-21 · CVE-2019-11219

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Shenzhen Yunni Technology iLnkP2P (affected versions not specified)

Description The algorithm used to generate device IDs (UIDs) for devices that utilize iLnkP2P suffers from a predictability flaw, allowing remote attackers to establish direct connections to arbitrary devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2019-11219

Affected Products

Ilnkp2P

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-11219 · Security Note
• https://hacked.camera · Note