CVE-2019-12776

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They include a hard-coded SSH backdoor for remote SSH and SCP access as the root user. A command in the relocate and relocate_revB scripts copies the hardcoded key to the root user's authorized_keys file, enabling anyone with the associated private key to gain remote root access to all affected products.

• CWE-798

• https://www.mogozobo.com/?p=3476Exploit, Third Party Advisory
• https://www.mogozobo.com/?p=3476Exploit, Third Party Advisory

Published

Jun 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12769SolarWinds Serv-U Managed File Transfer (MFT) Web client bef…8.8
• CVE-2019-1277An elevation of privilege vulnerability exists in Windows Au…7.8
• CVE-2019-12771Command injection is possible in ThinStation through 6.1.1 v…
• CVE-2019-12773An issue was discovered in Verint Impact 360 15.1. At wfo/he…6.1
• CVE-2019-12774A number of stored XSS vulnerabilities have been identified …
• CVE-2019-12775An issue was discovered on the ENTTEC Datagate MK2, Storm 24…
• CVE-2019-12777An issue was discovered on the ENTTEC Datagate MK2, Storm 24…
• CVE-2019-12779libqb before 1.0.5 allows local users to overwrite arbitrary…
• CVE-2019-1278An elevation of privilege vulnerability exists in the way th…7.8
• CVE-2019-12780The Belkin Wemo Enabled Crock-Pot allows command injection i…
• CVE-2019-12781An issue was discovered in Django 1.11 before 1.11.22, 2.1 b…
• CVE-2019-12782An authorization bypass vulnerability in pinboard updates in…