CVE-2019-18989

A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.

• CWE-290

• https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/Third Party Advisory
• https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/Third Party Advisory

Published

Sep 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18981Pimcore before 6.2.2 lacks an Access Denied outcome for a ce…9.8
• CVE-2019-18982bundles/AdminBundle/Controller/Admin/EmailController.php in …6.1
• CVE-2019-18985Pimcore before 6.2.2 lacks brute force protection for the 2F…9.8
• CVE-2019-18986Pimcore before 6.2.2 allow attackers to brute-force (guess) …7.5
• CVE-2019-18987An issue was discovered in the AbuseFilter extension through…5.3
• CVE-2019-18988TeamViewer Desktop through 14.7.1965 allows a bypass of remo…7
• CVE-2019-1899A vulnerability in the web interface of Cisco RV110W, RV130W…5.3
• CVE-2019-18990A partial authentication bypass vulnerability exists on Real…5.4
• CVE-2019-18991A partial authentication bypass vulnerability exists on Athe…5.4
• CVE-2019-18992OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-…5.4
• CVE-2019-18993OpenWrt 18.06.4 allows XSS via the "New port forward" Name f…5.4
• CVE-2019-18994Due to a lack of file length check, the HMIStudio component …6.5