CVE-2019-16313 - OpenCVE

ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

Vendors & Products
CPE Configurations

Vendors	Products
Ifw8	Fr8 Firmware Fr5-e Firmware Fr6 Fr6-s Fr6-s Firmware Fr5 Fr5 Firmware Fr6 Firmware Fr5-e Fr8

Configuration 1 [-]

AND

cpe:2.3:o:ifw8:fr6_firmware:4.31:*:*:*:*:*:*:*

cpe:2.3:h:ifw8:fr6:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:ifw8:fr8_firmware:4.31:*:*:*:*:*:*:*

cpe:2.3:h:ifw8:fr8:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:ifw8:fr5_firmware:4.31:*:*:*:*:*:*:*

cpe:2.3:h:ifw8:fr5:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:ifw8:fr5-e_firmware:4.31:*:*:*:*:*:*:*

cpe:2.3:h:ifw8:fr5-e:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:ifw8:fr6-s_firmware:4.31:*:*:*:*:*:*:*

cpe:2.3:h:ifw8:fr6-s:-:*:*:*:*:*:*:*

References

Link	Resource
http://www.iwantacve.cn/index.php/archives/311/	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2019-09-14T15:22:34

Updated: 2019-09-14T15:22:34

Reserved: 2019-09-14T00:00:00

Link: CVE-2019-16313

JSON object: View

NVD Information

Status : Analyzed

Published: 2019-09-14T16:15:10.930

Modified: 2020-08-24T17:37:01.140

Link: CVE-2019-16313

JSON object: View

Redhat Information

No data.

CWE

CWE-798

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ifw8:fr6_firmware:4.31:*:*:*:*:*:*:*", "matchCriteriaId": "8D92BD58-59B1-422C-8F0F-42B25D8C319F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ifw8:fr6:-:*:*:*:*:*:*:*", "matchCriteriaId": "2070E820-13BB-41D5-AA46-C17203FE4CF6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ifw8:fr8_firmware:4.31:*:*:*:*:*:*:*", "matchCriteriaId": "84EFCF9A-9D73-42F6-BDBA-E3BD24A2AD89", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ifw8:fr8:-:*:*:*:*:*:*:*", "matchCriteriaId": "658211BE-CE91-4FE4-8EA3-8BD61E9D3EFD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ifw8:fr5_firmware:4.31:*:*:*:*:*:*:*", "matchCriteriaId": "C557CE6A-CE5F-413E-942C-84D51D941101", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ifw8:fr5:-:*:*:*:*:*:*:*", "matchCriteriaId": "B893CE35-FE5E-4D8A-A9F7-2F5AF74329A5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ifw8:fr5-e_firmware:4.31:*:*:*:*:*:*:*", "matchCriteriaId": "29F56CEF-3E40-454B-B60B-57FCC4D3ACA4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ifw8:fr5-e:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D0BE85E-2969-4942-BC4E-72EBA654CFDD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ifw8:fr6-s_firmware:4.31:*:*:*:*:*:*:*", "matchCriteriaId": "6C749EB2-0D6C-4043-BAAF-13E0141EE847", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ifw8:fr6-s:-:*:*:*:*:*:*:*", "matchCriteriaId": "26B4EA9C-A545-4050-882B-6917E611E1F9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code."}, {"lang": "es", "value": "ifw8 Router ROM versi\u00f3n v4.31, permite la divulgaci\u00f3n de credenciales mediante la lectura del c\u00f3digo fuente HTML del archivo action/usermanager.htm."}], "id": "CVE-2019-16313", "lastModified": "2020-08-24T17:37:01.140", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-09-14T16:15:10.930", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "http://www.iwantacve.cn/index.php/archives/311/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}]}