CVE-2019-12775

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They allow high-privileged root access by www-data via sudo without requiring appropriate access control. (Furthermore, the user account that controls the web application service is granted full access to run any system commands with elevated privilege, without the need for password authentication. Should vulnerabilities be identified and exploited within the web application, it may be possible for a threat actor to create or run high-privileged binaries or executables that are available within the operating system of the device.)

• CWE-269

• https://www.mogozobo.com/?p=3476Exploit, Third Party Advisory
• https://www.mogozobo.com/?p=3476Exploit, Third Party Advisory

Published

Jun 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12768An issue was discovered on D-Link DAP-1650 devices through v…9.8
• CVE-2019-12769SolarWinds Serv-U Managed File Transfer (MFT) Web client bef…8.8
• CVE-2019-1277An elevation of privilege vulnerability exists in Windows Au…7.8
• CVE-2019-12771Command injection is possible in ThinStation through 6.1.1 v…
• CVE-2019-12773An issue was discovered in Verint Impact 360 15.1. At wfo/he…6.1
• CVE-2019-12774A number of stored XSS vulnerabilities have been identified …
• CVE-2019-12776An issue was discovered on the ENTTEC Datagate MK2, Storm 24…
• CVE-2019-12777An issue was discovered on the ENTTEC Datagate MK2, Storm 24…
• CVE-2019-12779libqb before 1.0.5 allows local users to overwrite arbitrary…
• CVE-2019-1278An elevation of privilege vulnerability exists in the way th…7.8
• CVE-2019-12780The Belkin Wemo Enabled Crock-Pot allows command injection i…
• CVE-2019-12781An issue was discovered in Django 1.11 before 1.11.22, 2.1 b…