CVE-2019-7564 - CVE House
Back to Database
Status published Critical CVE-2019-7564

An issue was discovered on Shenzhen Coship WM3300 WiFi Router...

Vulnerability Description

An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wl_security_2G.asp URI, the attacker can change the password of the Wi-FI network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-7564

Credits & Attribution

No credits recorded in the NVD database.

References

More from coship

View All →
CVE-2019-6441
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052...
Critical 9.8
CVE-2018-8772
Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID...
Medium 6.1

Affected Vendor

Affected Software

rt3052 firmware, rt3050 firmware, wm3300 firmware, rt7620 firmware
Vulnerable Versions:
4.0.0.48, 4.0.0.40, 5.0.0.54, 5.0.0.55, 10.0.0.49

Timeline

Official Publish: May 7th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.