High severity8.8NVD Advisory· Published Jan 27, 2020· Updated Jun 17, 2026
CVE-2019-19824
CVE-2019-19824
Description
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and N302RE 2.0.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- TOTOLINK/Realtek SDK based routersdescription
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2020/Jan/36nvdExploitMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2020/Jan/38nvdExploitMailing ListThird Party Advisory
- sploit.technvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.