Critical severity9.8NVD Advisory· Published May 7, 2020· Updated Jun 17, 2026
CVE-2019-18868
CVE-2019-18868
Description
Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <=3.00r4
- Blaauw/Remote Kiln Controldescription
cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:v4:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:v4:*:*:*:*:*:*
- cpe:2.3:a:blaauwproducts:remote_kiln_control:*:*:*:*:*:*:*:*range: <=3.0.0
Patches
Vulnerability mechanics
References
2- github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.mdnvdExploitThird Party Advisory
- lodestonesecurity.comnvdNot Applicable
News mentions
0No linked articles in our index yet.