CVE-2019-20462

An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial interface at the board level. By attaching to this serial interface and rebooting the device, a large amount of information is disclosed. This includes the view password and the password of the Wi-Fi access point that the device used.

• CWE-284

• https://seclists.org/fulldisclosure/2024/Jul/14
• https://www.alecto.nl
• http://seclists.org/fulldisclosure/2024/Jul/14

Published

Nov 7, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20457An issue was discovered on Brother MFC-J491DW C1806180757 de…9.1
• CVE-2019-20458An issue was discovered on Epson Expression Home XP255 20.08…8.8
• CVE-2019-20459An issue was discovered on Epson Expression Home XP255 20.08…8.4
• CVE-2019-2046In CalculateInstanceSizeForDerivedClass of objects.cc, there…
• CVE-2019-20460An issue was discovered on Epson Expression Home XP255 20.08…8.8
• CVE-2019-20461An issue was discovered on Alecto IVM-100 2019-11-12 devices…9.8
• CVE-2019-20463An issue was discovered on Sannce Smart HD Wifi Security Cam…7.5
• CVE-2019-20464An issue was discovered on Sannce Smart HD Wifi Security Cam…7.5
• CVE-2019-20465An issue was discovered on Sannce Smart HD Wifi Security Cam…7.5
• CVE-2019-20466An issue was discovered on Sannce Smart HD Wifi Security Cam…7.8
• CVE-2019-20467An issue was discovered on Sannce Smart HD Wifi Security Cam…9.8
• CVE-2019-20468An issue was discovered in SeTracker2 for TK-Star Q90 Junior…9.8