CVE-2019-13474

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have insufficient access control for the /set_dname, /mylogo, /LocalPlay, /irdevice.xml, /Sendkey, /setvol, /hotkeylist, /init, /playlogo.jpg, /stop, /exit, /back, and /playinfo commands.

• CWE-798

• http://packetstormsecurity.com/files/174503/Internet-Radio-auna-IR-160-SE-UIProto-DoS-XSS-Missing-Authentication.html
• http://seclists.org/fulldisclosure/2019/Sep/12Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Sep/1
• https://www.vulnerability-lab.com/get_content.php?id=2183Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/174503/Internet-Radio-auna-IR-160-SE-UIProto-DoS-XSS-Missing-Authentication.html
• http://seclists.org/fulldisclosure/2019/Sep/12Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Sep/1
• https://www.vulnerability-lab.com/get_content.php?id=2183Exploit, Third Party Advisory

Published

Sep 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13466Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD…7.5
• CVE-2019-13467Description: Western Digital SSD Dashboard before 2.5.1.0 an…5.9
• CVE-2019-1347A denial of service vulnerability exists when Windows improp…6.5
• CVE-2019-13470MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.…
• CVE-2019-13472PHPWind 9.1.0 has XSS vulnerabilities in the c and m paramet…
• CVE-2019-13473TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imp…9.8
• CVE-2019-13475In MobaXterm 11.1, the mobaxterm: URI handler has an argumen…
• CVE-2019-13476In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837,…
• CVE-2019-13477In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837,…
• CVE-2019-13478The Yoast SEO plugin before 11.6-RC5 for WordPress does not …9.8
• CVE-2019-1348An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, …3.3
• CVE-2019-13481An issue was discovered on D-Link DIR-818LW devices with fir…8.8