Unrated severityNVD Advisory· Published Mar 19, 2020· Updated Aug 5, 2024
CVE-2019-15654
CVE-2019-15654
Description
Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any authentication and will lead to saving the DBconfig.cfg file. At the end of the file, the login information is stored in cleartext.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Comba/AC2400 devicesdescription
Patches
Vulnerability mechanics
References
2- www.comba-telecom.com/en/newsmitrex_refsource_MISC
- www.trustwave.com/en-us/resources/security-resources/security-advisories/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.