PT-2019-18095 · Soyal · Soyal Ar-829Ev5+1

Published 2019-06-06 · Updated 2023-02-28 · CVE-2019-6451

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SOYAL AR-727H (affected versions not specified) SOYAL AR-829Ev5 (affected versions not specified)

Description The issue allows unauthenticated POST access to all CGI programs.

Recommendations For SOYAL AR-727H, at the moment, there is no information about a newer version that contains a fix for this issue. For SOYAL AR-829Ev5, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-6451

Affected Products

Soyal Ar-727H

Soyal Ar-829Ev5

References · 6

• 🔥 https://github.com/cvereveal/CVEs/tree/master/CVE-2019-6451 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-6451 · Security Note
• https://soyal.com.tw/cve-2019-6451 · Vendor Advisory
• https://soyal.com/exhibition/cve-2019-6451 · Note
• http://soyal.com/epaper/e-paper-en-117.html · Note
• http://nccst.nat.gov.tw · Note