CVE-2019-17218

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the communication to the web service is unencrypted via http. An attacker is able to intercept and sniff communication to the web service.

• CWE-319

• https://vuldb.com/?id.134116Permissions Required, Third Party Advisory
• https://vuldb.com/?id.134116Permissions Required, Third Party Advisory

Published

Oct 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17212Buffer overflows were discovered in the CoAP library in Arm …9.8
• CVE-2019-17213The WebARX plugin 1.3.0 for WordPress has unauthenticated st…6.1
• CVE-2019-17214The WebARX plugin 1.3.0 for WordPress allows firewall bypass…7.5
• CVE-2019-17215An issue was discovered on V-Zug Combi-Steam MSLQ devices be…9.8
• CVE-2019-17216An issue was discovered on V-Zug Combi-Steam MSLQ devices be…9.8
• CVE-2019-17217An issue was discovered on V-Zug Combi-Steam MSLQ devices be…8.8
• CVE-2019-17219An issue was discovered on V-Zug Combi-Steam MSLQ devices be…8.8
• CVE-2019-1722A vulnerability in the FindMe feature of Cisco Expressway Se…6.5
• CVE-2019-17220Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] …6.1
• CVE-2019-17221PhantomJS through 2.1.1 has an arbitrary file read vulnerabi…7.5
• CVE-2019-17222An issue was discovered on Intelbras WRN 150 1.0.17 devices.…6.1
• CVE-2019-17223There is HTML Injection in the Note field in Dolibarr ERP/CR…6.1