CVE-2019-15497 - CVE House
Back to Database
Status published Critical CVE-2019-15497

Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN...

Vulnerability Description

Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that allow remote attackers to access devices remotely via SSH, HTTP, HTTPS, and FTP.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15497

Credits & Attribution

No credits recorded in the NVD database.

References

More from blackbox

View All →
CVE-2016-2311
Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor...
Medium 6.5

Affected Vendor

Affected Software

icompel firmware, net-top-box firmware
Vulnerable Versions:
9.2.3

Timeline

Official Publish: August 26th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.