CVE-2018-19978 - CVE House
Back to Database
Status published High CVE-2018-19978

A buffer overflow vulnerability in the DHCP and PPPOE configuration...

Vulnerability Description

A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker (authenticated as simple user in the same network as the device) to trigger remote code execution via a POST request (ManufacturerName parameter) to the web server on the device. The web server is running with root privileges and the injected code will also run with root privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-19978

Credits & Attribution

No credits recorded in the NVD database.

References

More from auerswald

View All →
CVE-2021-40859
Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B...
Critical 9.8
CVE-2021-40858
Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure....
Medium 4.9
CVE-2021-40857
Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via...
High 8.8
CVE-2021-40856
Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices...
High 7.5
CVE-2018-19977
A command injection (missing input validation, escaping) in the ftp...
High 8

Affected Vendor

Affected Software

comfortel 1200 ip firmware
Vulnerable Versions:
3.4.4.1-10589

Timeline

Official Publish: May 29th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.