QwikSec

Security Database

CVE

CWE

Training

CVE-2019-6441

Published: Mar 19, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.html

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

exploit

x_refsource_EXPLOIT-DB

https://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.html

x_refsource_MISC

https://vulmon.com/exploitdetails?qidtp=EDB&qid=46180

x_refsource_MISC

https://www.anquanke.com/vul/id/1451446

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.