CVE-2019-19824: OS Command Injection
First published: Mon Jan 27 2020(Updated: )
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TOTOLINK A3002RU | <=2.0.0 | |
| TOTOLINK A3002R | ||
| Totolink A702R | <=2.1.3 | |
| Totolink A702R-v2 | ||
| Totolink N301rt Firmware | <=2.1.6 | |
| Totolink N301rt Firmware | ||
| Totolink N302r Plus | <=3.4.0 | |
| Totolink N302R | ||
| Totolink N300RT | <=3.4.0 | |
| Totolink N300RT Firmware | ||
| Totolink N200RE-v3 Firmware | <=4.0.0 | |
| Totolink N200re Firmware | ||
| Totolink N150rt | <=3.4.0 | |
| Totolink N150rt Firmware | ||
| Totolink N100RE Firmware | <=3.4.0 | |
| Totolink N100RE Firmware | ||
| All of | ||
| TOTOLINK A3002RU | <=2.0.0 | |
| TOTOLINK A3002R | ||
| All of | ||
| Totolink A702R | <=2.1.3 | |
| Totolink A702R-v2 | ||
| All of | ||
| Totolink N301rt Firmware | <=2.1.6 | |
| Totolink N301rt Firmware | ||
| All of | ||
| Totolink N302r Plus | <=3.4.0 | |
| Totolink N302R | ||
| All of | ||
| Totolink N300RT | <=3.4.0 | |
| Totolink N300RT Firmware | ||
| All of | ||
| Totolink N200RE-v3 Firmware | <=4.0.0 | |
| Totolink N200re Firmware | ||
| All of | ||
| Totolink N150rt | <=3.4.0 | |
| Totolink N150rt Firmware | ||
| All of | ||
| Totolink N100RE Firmware | <=3.4.0 | |
| Totolink N100RE Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2019-19824.
What is the severity level of CVE-2019-19824?
The severity level of CVE-2019-19824 is critical with a severity value of 8.8.
Which TOTOLINK routers are affected by CVE-2019-19824?
The TOTOLINK routers affected by CVE-2019-19824 are A3002RU with firmware up to version 2.0.0, A702r with firmware up to version 2.1.3, N301rt with firmware up to version 2.1.6, N302r with firmware up to version 3.4.0, N300rt with firmware up to version 3.4.0, N200re with firmware up to version 4.0.0, N150rt with firmware up to version 3.4.0, and N100re with firmware up to version 3.4.0.
How does the vulnerability CVE-2019-19824 allow an attacker to execute arbitrary OS commands?
The vulnerability CVE-2019-19824 allows an authenticated attacker to execute arbitrary OS commands by using the sysCmd parameter to the boafrm/formSysCmd URI.
Are there any available fixes for CVE-2019-19824?
At the moment, there are no known fixes or patches available for CVE-2019-19824. It is advised to take measures such as implementing strong access controls and network segmentation to mitigate the risk.
- agent/type
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/event
- agent/references
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/totolink
- canonical/totolink a3002ru
- version/totolink a3002ru/2.0.0
- canonical/totolink a3002r
- canonical/totolink a702r
- version/totolink a702r/2.1.3
- canonical/totolink a702r-v2
- canonical/totolink n301rt firmware
- version/totolink n301rt firmware/2.1.6
- canonical/totolink n302r plus
- version/totolink n302r plus/3.4.0
- canonical/totolink n302r
- canonical/totolink n300rt
- version/totolink n300rt/3.4.0
- canonical/totolink n300rt firmware
- canonical/totolink n200re-v3 firmware
- version/totolink n200re-v3 firmware/4.0.0
- canonical/totolink n200re firmware
- canonical/totolink n150rt
- version/totolink n150rt/3.4.0
- canonical/totolink n150rt firmware
- canonical/totolink n100re firmware
- version/totolink n100re firmware/3.4.0