high8.8
CVE-2019-15312
An issue was discovered on Zolo Halo devices via the Linkplay firmware.
Impact
An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an attacker to compromise the victim device from the Internet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linkplay | Linkplay | All versions |
References
- NVD record
- CVE.org record
- https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/
- https://labs.mwrinfosecurity.com/advisories/
- https://linkplay.com/featured-products/
- https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/
- https://labs.mwrinfosecurity.com/advisories/
- https://linkplay.com/featured-products/