Back to search
CVE-2019-13405
Published: Aug 29, 2019
Modified: Sep 16, 2024
PUBLISHED
Description
A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any authentication then take the compromised device as a relay or to install mining software.
| Vendor | Product | Versions |
|---|---|---|
AndroVideo | Advan VD-1 firmware | affected 230 |
References
https://tvn.twcert.org.tw/taiwanvn/TVN-201906006
x_refsource_CONFIRM
http://surl.twcert.org.tw/VeNHn
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now