high7.5
CVE-2019-19967
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on…
Impact
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Upc | Connect Box Eurodocsis Firmware | Version ch7465lg-ncip-6.12.18.25-2p6-nosh |