CVE-2019-13379: Critical severity avtech room alert 3e vulnerability
On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13379?
CVE-2019-13379 has been classified as a critical vulnerability due to its ability to allow privilege escalation.
How do I fix CVE-2019-13379?
To mitigate CVE-2019-13379, update the firmware of the AVTECH Room Alert 3E device to version 2.2.5 or later.
What type of devices are affected by CVE-2019-13379?
CVE-2019-13379 affects AVTECH Room Alert 3E devices running firmware versions prior to 2.2.5.
Can an attacker exploit CVE-2019-13379 remotely?
CVE-2019-13379 requires an attacker to have web interface access to the device, making it less likely to be exploited remotely without prior access.
What actions can lead to the exploitation of CVE-2019-13379?
Exploitation of CVE-2019-13379 can occur by performing a specific reset command and then using default credentials to gain administrator access.