CVE-2019-13269 - CVE House
Back to Database
Status published High CVE-2019-13269

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host...

Vulnerability Description

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK message. Studying the NAK case revealed that the router erroneously sends the NAK to both Host and Guest networks with the same Transaction ID as found in the DHCP Request. This allows encoding of data to be sent cross-router into the 32-bit Transaction ID field.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13269

Credits & Attribution

No credits recorded in the NVD database.

References

More from edimax

View All →
CVE-2022-45768
Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router...
Unknown 0
CVE-2021-40597
The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with...
Critical 9.8
CVE-2020-26762
A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and...
Critical 9.8
CVE-2019-13271
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host...
High 8.8
CVE-2019-13270
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host...
High 8.8

Affected Vendor

Affected Software

br-6208ac v1 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: August 27th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.