CVE-2019-11064 | BDVDB-2026-122016 Detail

AndroVideoAdvan VD-1 firmware

Description#

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any authentication.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

https://tvn.twcert.org.tw/taiwanvn/TVN-201906005
http://surl.twcert.org.tw/gCDQN
https://gist.github.com/keniver/f5155b42eb278ec0273b83565b64235b#file-androvideo-advan-vd-1-multiple-vulnerabilities-md

Exploit#

No public exploit known

History#

Version 12019-08-29Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.