{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-07-01T19:21:52", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://labs.mwrinfosecurity.com/advisories/"}, {"tags": ["x_refsource_MISC"], "url": "https://linkplay.com/featured-products/"}, {"tags": ["x_refsource_MISC"], "url": "https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-15311", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://labs.mwrinfosecurity.com/advisories/", "refsource": "MISC", "url": "https://labs.mwrinfosecurity.com/advisories/"}, {"name": "https://linkplay.com/featured-products/", "refsource": "MISC", "url": "https://linkplay.com/featured-products/"}, {"name": "https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/", "refsource": "MISC", "url": "https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-15311", "datePublished": "2020-07-01T19:21:52", "dateReserved": "2019-08-21T00:00:00", "dateUpdated": "2020-07-01T19:21:52", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linkplay:linkplay:-:*:*:*:*:*:*:*", "matchCriteriaId": "61C9245A-2EEC-4F3D-96A7-3490561D9938", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities."}, {"lang": "es", "value": "Se detect\u00f3 un problema en los dispositivos Zolo Halo por medio del firmware Linkplay. Se presenta una ejecuci\u00f3n de c\u00f3digo remota LAN de Zolo Halo. El altavoz Bluetooth Zolo Halo ten\u00eda un servidor web GoAhead escuchando en el puerto 80. El endpoint /httpapi.asp del servidor web GoAhead tambi\u00e9n era vulnerable a m\u00faltiples vulnerabilidades de ejecuci\u00f3n de comandos"}], "id": "CVE-2019-15311", "lastModified": "2021-07-21T11:39:23.747", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-07-01T20:15:10.860", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://labs.mwrinfosecurity.com/advisories/"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://linkplay.com/featured-products/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}