$ cve CVE-2018-20219 JSON

CVE-2018-20219 EXPLOIT

8.1

HIGH · CVSS 3.0 · EPSS 14.6% (pctl 97)

Patch early

A public exploit exists.

Description

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the device sends an authentication cookie to the end user such that they can access the devices web administration panel. This token is hard-coded to a string in the source code (/usr/share/www/check.lp file). By setting this cookie in a browser, an attacker is able to maintain access to every ENC-400 device without knowing the password, which results in authentication bypass. Even if a user changes the password on the device, this token is static and unchanged.

Scoring

CVSS	8.1 (HIGH, v3.0)
Vector	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	14.55% — more likely to be exploited than 97% of all CVEs
Weakness	CWE-798
On CISA KEV	no
Public exploit	yes
Published	2019-03-21
Last modified	2026-06-17

Affected (6)

Vendor	Product
teracue	enc-400 hdmi
teracue	enc-400 hdmi firmware
teracue	enc-400 hdmi2
teracue	enc-400 hdmi2 firmware
teracue	enc-400 hdsdi
teracue	enc-400 hdsdi firmware

Public exploits

Source	Title	Date
exploit-db	Teracue ENC-400 - Command Injection / Missing Authentication	2019-02-22

References

→ the Explorer · watch your stack · NVD