CVE-2019-5635

A cleartext transmission of sensitive information vulnerability is present in Hickory Smart Ethernet Bridge from Belwith Products, LLC. Captured data reveals that the Hickory Smart Ethernet Bridge device communicates over the network to an MQTT broker without using encryption. This exposed the default username and password used to authenticate to the MQTT broker. This issue affects Hickory Smart Ethernet Bridge, model number H077646. The firmware does not appear to contain versioning information.

• CWE-319
• CWE-319

• https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/Third Party Advisory
• https://hickoryhardware.com/products/hickory-smart-ethernet-bridge?variant=20882150228086Product
• https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/Third Party Advisory
• https://hickoryhardware.com/products/hickory-smart-ethernet-bridge?variant=20882150228086Product

Published

Aug 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5629Rapid7 Insight Agent, version 2.6.3 and prior, suffers from …7.8
• CVE-2019-5630A Cross-Site Request Forgery (CSRF) vulnerability was found …5.9
• CVE-2019-5631The Rapid7 InsightAppSec broker suffers from a DLL injection…7.8
• CVE-2019-5632An insecure storage of sensitive information vulnerability i…5.5
• CVE-2019-5633An insecure storage of sensitive information vulnerability i…5.5
• CVE-2019-5634An inclusion of sensitive information in log files vulnerabi…6.5
• CVE-2019-5636When a Beckhoff TwinCAT Runtime receives a malformed UDP pac…7.5
• CVE-2019-5637When Beckhoff TwinCAT is configured to use the Profinet driv…7.5
• CVE-2019-5638Rapid7 Nexpose versions 6.5.50 and prior suffer from insuffi…8.7
• CVE-2019-5640Rapid7 Nexpose versions prior to 6.6.114 suffer from an info…5.3
• CVE-2019-5641Rapid7 InsightVM suffers from an information exposure issue …5.3
• CVE-2019-5642Rapid7 Metasploit Pro version 4.16.0-2019081901 and prior su…3.3