CVE-2019-11061

A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

• CWE-306

• http://surl.twcert.org.tw/5df6xThird Party Advisory
• https://github.com/tim124058/ASUS-SmartHome-Exploit/Exploit, Third Party Advisory
• https://tvn.twcert.org.tw/taiwanvn/TVN-201906003Exploit, Third Party Advisory
• http://surl.twcert.org.tw/5df6xThird Party Advisory
• https://github.com/tim124058/ASUS-SmartHome-Exploit/Exploit, Third Party Advisory
• https://tvn.twcert.org.tw/taiwanvn/TVN-201906003Exploit, Third Party Advisory

Published

Aug 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1105A spoofing vulnerability exists in the way Microsoft Outlook…
• CVE-2019-11050When PHP EXIF extension is parsing EXIF information from an …6.5
• CVE-2019-11057SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfi…8.8
• CVE-2019-11059Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 6…
• CVE-2019-1106A remote code execution vulnerability exists in the way that…
• CVE-2019-11060The web api server on Port 8080 of ASUS HG100 firmware up to…7.5
• CVE-2019-11062The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS C…9.8
• CVE-2019-11063A broken access control vulnerability in SmartHome app (Andr…10
• CVE-2019-11064A vulnerability of remote credential disclosure was discover…9.8
• CVE-2019-11065Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL t…5.9
• CVE-2019-11066openid.php in LightOpenID through 1.3.1 allows SSRF via a cr…
• CVE-2019-11068libxslt through 1.1.33 allows bypass of a protection mechani…9.8