Description
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI.
Unscored
CVE-2019-19967
EUVD-2019-9555GHSA-rp7x-9gh4-8c2q
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password …
Published Dec 25, 2019 · Updated Aug 5, 2024 · Assigned by mitre