CVE-2019-20487
Last modified
CVE-2019-20487 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an unauthenticated GET request (exploitable directly or through CSRF), as demonstrated by the setup.cgi?todo=save_htp_account URI.. EPSS estimates a 0.46% chance of exploitation in the next 30 days.
Description
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an unauthenticated GET request (exploitable directly or through CSRF), as demonstrated by the setup.cgi?todo=save_htp_account URI.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Wnr1000 Firmware | 1.1.0.54 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-20487?
How severe is CVE-2019-20487?
How do I fix CVE-2019-20487?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-20480In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious w…8.8
- CVE-2019-20481In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password …9.8
- CVE-2019-20483An issue was discovered in Viki Vera 4.9.1.26180. An attacke…5.4
- CVE-2019-20484An issue was discovered in Viki Vera 4.9.1.26180. A user wit…8.1
- CVE-2019-20485qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the ho…5.7
- CVE-2019-20486An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 device…6.1
- CVE-2019-20488An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 device…9.8
- CVE-2019-20489An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 device…9.8
- CVE-2019-2049In SendMediaUpdate and SendFolderUpdate of avrcp_service.cc,…
- CVE-2019-20490cPanel before 82.0.18 allows authentication bypass because w…8.8
- CVE-2019-20491cPanel before 82.0.18 allows attackers to leverage virtual m…5.4
- CVE-2019-20492cPanel before 82.0.18 allows authentication bypass because o…8.8
Are you affected by CVE-2019-20487?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST