Medium severity6.5NVD Advisory· Published Sep 16, 2019· Updated Jun 17, 2026
CVE-2019-13140
CVE-2019-13140
Description
Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:intenogroup:eg200_firmware:eg200-wu7p1u_adamo3.16.4-190226_1650:*:*:*:*:*:*:*
- Inteno/EG200description
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/154494/Inteno-IOPSYS-Gateway-3DES-Key-Extraction-Improper-Access.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/docs/47397nvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/47390nvdExploitThird Party AdvisoryVDB Entry
- twitter.com/GerardFuguet/status/1169298861782896642nvdThird Party Advisory
News mentions
0No linked articles in our index yet.