CVE-2019-9976

NONE EPSS 59.3%
Published Apr 11, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Apr 11, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users.

Threat Intelligence

EPSS Exploit Probability
59.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-532

Affected Products 2

VendorProductVersionRange
dasannetworksh660rm_firmware1.03-0022any
dasannetworksh660rm*any

References 1

  • blog.burghardt.pl https://blog.burghardt.pl/2019/03/boa-webserver-on-dasan-h660rm-devices-with-firmware-1-03-0022-saves-post-data-including-credentials-to-tmp-boa-temp/
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.