CVE-2019-6441

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router.

• CWE-287

• http://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.htmlExploit, Third Party Advisory, VDB Entry
• https://vulmon.com/exploitdetails?qidtp=EDB&qid=46180Exploit, Third Party Advisory
• https://www.anquanke.com/vul/id/1451446Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/46180Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46180/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.htmlExploit, Third Party Advisory, VDB Entry
• https://vulmon.com/exploitdetails?qidtp=EDB&qid=46180Exploit, Third Party Advisory
• https://www.anquanke.com/vul/id/1451446Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/46180Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46180/Exploit, Third Party Advisory, VDB Entry

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6340Some field types do not properly sanitize data from non-form…8.1
• CVE-2019-6341In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prio…
• CVE-2019-6342An access bypass vulnerability exists when the experimental …9.8
• CVE-2019-6438SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishan…
• CVE-2019-6439examples/benchmark/tls_bench.c in a benchmark tool in wolfSS…
• CVE-2019-6440Zemana AntiMalware before 3.0.658 Beta mishandles update log…
• CVE-2019-6442An issue was discovered in NTPsec before 1.1.3. An authentic…
• CVE-2019-6443An issue was discovered in NTPsec before 1.1.3. Because of a…
• CVE-2019-6444An issue was discovered in NTPsec before 1.1.3. process_cont…
• CVE-2019-6445An issue was discovered in NTPsec before 1.1.3. An authentic…
• CVE-2019-6446An issue was discovered in NumPy before 1.16.3. It uses the …
• CVE-2019-6447The ES File Explorer File Manager application through 4.1.9.…8.1