CVE-2019-16651

An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a user (if they are using certain VPN implementations, this would decloak them).
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:virginmedia:super_hub_3_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:virginmedia:super_hub_3:-:*:*:*:*:*:*:*

Information

Published : 2021-09-20 07:15

Updated : 2021-10-05 07:47


NVD link : CVE-2019-16651

Mitre link : CVE-2019-16651


JSON object : View

CWE
CWE-863

Incorrect Authorization

Products Affected

virginmedia

  • super_hub_3_firmware
  • super_hub_3