CVE-2019-13025 | BDVDB-2026-123747 Detail

Description#

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTTP) request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable modem.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://xitan.me/posts/connect-box-ch7465lg-rce/

Exploit#

No public exploit known

History#

Version 12019-10-02Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.