CVE-2019-7564
First published: Tue May 07 2019(Updated: )
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wl_security_2G.asp URI, the attacker can change the password of the Wi-FI network.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Coship Rt3052 Firmware | =4.0.0.48 | |
| Coship RT3052 | ||
| Coship Rt3050 Firmware | =4.0.0.40 | |
| Coship RT3050 | ||
| Coship Wm3300 Firmware | =5.0.0.54 | |
| Coship Wm3300 Firmware | =5.0.0.55 | |
| Coship WM3300 | ||
| Coship Rt7620 Firmware | =10.0.0.49 | |
| Coship Rt7620 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-7564?
CVE-2019-7564 is an authentication bypass vulnerability discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices.
How does CVE-2019-7564 impact Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices?
CVE-2019-7564 allows an attacker to change the password of the Wi-Fi network without any authentication.
What is the severity level of CVE-2019-7564?
CVE-2019-7564 has a severity level of critical with a score of 9.8.
How can I fix CVE-2019-7564?
To fix CVE-2019-7564, it is recommended to update the firmware of the Shenzhen Coship WM3300 WiFi Router to a version that addresses the authentication bypass vulnerability.
Where can I find more information about CVE-2019-7564?
More information about CVE-2019-7564 can be found at the following reference link: http://packetstormsecurity.com/files/151595/Coship-Wireless-Router-4.0.0.x-5.0.0.x-Authentication-Bypass.html
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/coship
- canonical/coship rt3052 firmware
- version/coship rt3052 firmware/4.0.0.48
- canonical/coship rt3052
- canonical/coship rt3050 firmware
- version/coship rt3050 firmware/4.0.0.40
- canonical/coship rt3050
- canonical/coship wm3300 firmware
- version/coship wm3300 firmware/5.0.0.54
- version/coship wm3300 firmware/5.0.0.55
- canonical/coship wm3300
- canonical/coship rt7620 firmware
- version/coship rt7620 firmware/10.0.0.49
- canonical/coship rt7620