CVE-2019-13473

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root access.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:telestar:bobs_rock_radio_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:bobs_rock_radio:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:telestar:dabman_d10_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:dabman_d10:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:telestar:dabman_i30_stereo_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:dabman_i30_stereo:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:telestar:imperial_i110_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:imperial_i110:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:telestar:imperial_i150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:imperial_i150:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:telestar:imperial_i200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:imperial_i200:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:telestar:imperial_i200-cd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:imperial_i200-cd:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:telestar:imperial_i400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:imperial_i400:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:telestar:imperial_i450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:imperial_i450:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:telestar:imperial_i500-bt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:imperial_i500-bt:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:telestar:imperial_i600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:telestar:imperial_i600:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:auna:connect_100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:auna:connect_100:-:*:*:*:*:*:*:*

Information

Published : 2019-09-11 12:15

Updated : 2020-08-27 10:36


NVD link : CVE-2019-13473

Mitre link : CVE-2019-13473


JSON object : View

CWE
CWE-798

Use of Hard-coded Credentials

Advertisement

dedicated server usa

Products Affected

telestar

  • imperial_i450_firmware
  • bobs_rock_radio
  • imperial_i200-cd
  • imperial_i500-bt_firmware
  • imperial_i200-cd_firmware
  • imperial_i500-bt
  • dabman_d10_firmware
  • dabman_i30_stereo
  • imperial_i600_firmware
  • bobs_rock_radio_firmware
  • imperial_i110_firmware
  • imperial_i200_firmware
  • imperial_i110
  • imperial_i600
  • dabman_d10
  • dabman_i30_stereo_firmware
  • imperial_i150_firmware
  • imperial_i400_firmware
  • imperial_i150
  • imperial_i200
  • imperial_i450
  • imperial_i400

auna

  • connect_100
  • connect_100_firmware