HOME VULNERABILITIESCVE-2019-19823

HIGH

CVE-2019-19823

CWE-522Published: January 27, 2020· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.

Technical Analysis

CVE-2019-19823 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 7.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Vendors & Products

ciktel2 product(s)

mesh router firmwaremesh router

coship2 product(s)

emta ap firmwreemta ap

fg-products2 product(s)

fgn-r2 firmwarefgn-r2

hcn_max-c300n_project2 product(s)

hcn max-c300n firmwarehcn max-c300n

hiwifi2 product(s)

max-c300n firmwaremax-c300n

iodata2 product(s)

wn-ac1167r firmwrewn-ac1167r

kctvjeju2 product(s)

wireless ap firmwarewireless ap

realtek2 product(s)

rtk 11n ap firmwarertk 11n ap

sapido2 product(s)

gr297n firmwaregr297n

tbroad2 product(s)

gn-866ac firmwaregn-866ac

totolink16 product(s)

a3002ru firmwarea3002rua702r firmwarea702rn302r firmwaren302rn300rt firmwaren300rtn200re firmwaren200ren150rt firmwaren150rt+4

Source: NVD CPE · 36 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttp://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz

ADVISORYhttp://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html

ADVISORYhttp://seclists.org/fulldisclosure/2020/Jan/36

ADVISORYhttp://seclists.org/fulldisclosure/2020/Jan/38

ADVISORYhttps://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13

ADVISORYhttps://sploit.tech

ADVISORYhttp://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz

ADVISORYhttp://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html

ADVISORYhttp://seclists.org/fulldisclosure/2020/Jan/36

ADVISORYhttp://seclists.org/fulldisclosure/2020/Jan/38

ADVISORYhttps://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13

ADVISORYhttps://sploit.tech

All References (12)

→

http://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgzExploit · Third Party Advisory

→

http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.htmlExploit · Third Party Advisory · VDB Entry

→

http://seclists.org/fulldisclosure/2020/Jan/36Mailing List · Third Party Advisory

→

http://seclists.org/fulldisclosure/2020/Jan/38Exploit · Mailing List · Third Party Advisory

→

https://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13Third Party Advisory

→

https://sploit.techThird Party Advisory

→

http://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgzExploit · Third Party Advisory

→

http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.htmlExploit · Third Party Advisory · VDB Entry

→

http://seclists.org/fulldisclosure/2020/Jan/36Mailing List · Third Party Advisory

→

http://seclists.org/fulldisclosure/2020/Jan/38Exploit · Mailing List · Third Party Advisory

→

https://github.com/Saturn49/wecb/blob/755ce19a493c78270c04b5aaf39664f0cddbb420/rtl819x/users/boa/apmib/apmib.h#L13Third Party Advisory

→

https://sploit.techThird Party Advisory

Quick Facts

CVE IDCVE-2019-19823

CVSS Score7.5 / 10

SeverityHIGH

WeaknessCWE-522

CISA KEVNo

Affected11 vendor(s)

PublishedJan 27, 2020

Related CVEs (CWE-522)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2019-19823 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2019-19823·NVD