CVE-2019-12789 - CVE House
Back to Database
Status published Medium CVE-2019-12789

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as...

Vulnerability Description

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key sequence (Ctrl-\) to obtain a shell with root privileges. After gaining root access, the attacker can mount the filesystem read-write and make permanent modifications to the device including bricking of the device, disabling vendor management of the device, preventing automatic upgrades, and permanently installing malicious code on the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12789

Credits & Attribution

No credits recorded in the NVD database.

References

More from actiontec

View All →
CVE-2018-19922
Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page...
Medium 6.1
CVE-2018-15557
An issue was discovered in the Quantenna WiFi Controller on...
High 8.8
CVE-2018-15556
The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows...
Critical 9.8
CVE-2018-15555
On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login...
Critical 9.8
CVE-2018-10252
An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices....
High 8.1

Affected Vendor

Affected Software

t2200h firmware
Vulnerable Versions:
t2200h-31.1238l.08

Timeline

Official Publish: June 17th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.