Critical severity9.8NVD Advisory· Published May 23, 2019· Updated Jun 17, 2026
CVE-2019-12289
CVE-2019-12289
Description
An issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C7824WIP) CH-sys-48.53.75.119~123 and 200V (C38S) CH-sys-48.53.203.119~123 devices. A remote command can be executed through a system firmware update without authentication. The attacker can modify the files within the internal firmware or even steal account information by executing a command.
Affected products
5- cpe:2.3:o:vstracam:c38s_firmware:ch-sys-48.53.203.119\~123:*:*:*:*:*:*:*
- cpe:2.3:o:vstracam:c7824wip_firmware:ch-sys-48.53.75.119\~123:*:*:*:*:*:*:*
- VStarcam/100Tdescription
Patches
Vulnerability mechanics
References
1- f1security.co.kr/cve/cve_190314.htmnvdBroken Link
News mentions
0No linked articles in our index yet.