PT-2025-48190 · Dongyoung Media · Dongyoung Media Dm-Ap240T/W

Todor Donev · Published 2025-11-26 · Updated 2025-11-27 · CVE-2019-25226

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Dongyoung Media DM-AP240T/W (affected versions not specified)

Description Dongyoung Media DM-AP240T/W wireless access points have an issue where the /cgi-bin/sys system config API endpoint allows remote retrieval of a configuration archive without authentication. This allows an attacker to obtain administrative credentials and other sensitive settings, potentially leading to further compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-25226

Affected Products

Dongyoung Media Dm-Ap240T/W

References · 7

• 🔥 https://cxsecurity.com/issue/WLB-2019100012 · Exploit
• 🔥 https://packetstorm.news/files/id/154719 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25226 · Security Note
• https://t.me/cveNotify/144144 · Telegram Post
• http://dongyoung.com · Note
• https://vulncheck.com/advisories/dongyoung-media-dm-ap240tw-unauthenticated-config-disclosure · Note
• https://t.me/CVEtracker/38327 · Telegram Post