CVE-2019-13406

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:androvideo:vd_1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:androvideo:vd_1:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-08-29 01:15

Updated : 2023-12-10 12:59


NVD link : CVE-2019-13406

Mitre link : CVE-2019-13406

CVE.ORG link : CVE-2019-13406


JSON object : View

Products Affected

androvideo

  • vd_1_firmware
  • vd_1
CWE
CWE-306

Missing Authentication for Critical Function