First published: Tue Aug 27 2019(Updated: )
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK message. Studying the NAK case revealed that the router erroneously sends the NAK to both Host and Guest networks with the same Transaction ID as found in the DHCP Request. This allows encoding of data to be sent cross-router into the 32-bit Transaction ID field.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Edimax BR-6208AC V1 Firmware | ||
Edimax BR-6208AC V1 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-13269 is classified as a high severity vulnerability due to insufficient compartmentalization between host and guest networks.
To fix CVE-2019-13269, update the Edimax BR-6208AC V1 firmware to the latest version provided by the manufacturer.
CVE-2019-13269 specifically affects Edimax BR-6208AC V1 devices.
CVE-2019-13269 is a network security vulnerability related to DHCP implementation that allows for improper isolation between guest and host networks.
Yes, CVE-2019-13269 can potentially allow unauthorized access to the host network from the guest network.