high8.8
CVE-2019-13379
On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to adm…
Impact
On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avtech | Room Alert 3e Firmware | before 2.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
- https://www.youtube.com/watch?v=X1PY7kMFkVg
- https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
- https://www.youtube.com/watch?v=X1PY7kMFkVg