← Back

CVE-2019-13474

nvd nist
Published: Sep 16, 2019Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have insufficient access control for the /set_dname, /mylogo, /LocalPlay, /irdevice.xml, /Sendkey, /setvol, /hotkeylist, /init, /playlogo.jpg, /stop, /exit, /back, and /playinfo commands.

Affected (11)

Telestar
11 products
Bobs Rock Radio Firmware
Dabman D10 Firmware
Dabman I30 Stereo Firmware
Imperial I110 Firmware
Imperial I150 Firmware
Imperial I200 Firmware
Imperial I200 Cd Firmware
Imperial I400 Firmware
Imperial I450 Firmware
Imperial I500 Bt Firmware
Imperial I600 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bobs Rock Radio Firmware
All versions
Running on/withPlatform Versions
Telestar
Bobs Rock Radio
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dabman D10 Firmware
All versions
Running on/withPlatform Versions
Telestar
Dabman D10
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dabman I30 Stereo Firmware
All versions
Running on/withPlatform Versions
Telestar
Dabman I30 Stereo
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Imperial I110 Firmware
All versions
Running on/withPlatform Versions
Telestar
Imperial I110
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Imperial I150 Firmware
All versions
Running on/withPlatform Versions
Telestar
Imperial I150
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Imperial I200 Firmware
All versions
Running on/withPlatform Versions
Telestar
Imperial I200
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Imperial I200 Cd Firmware
All versions
Running on/withPlatform Versions
Telestar
Imperial I200 Cd
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Imperial I400 Firmware
All versions
Running on/withPlatform Versions
Telestar
Imperial I400
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Imperial I450 Firmware
All versions
Running on/withPlatform Versions
Telestar
Imperial I450
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Imperial I500 Bt Firmware
All versions
Running on/withPlatform Versions
Telestar
Imperial I500 Bt
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Imperial I600 Firmware
All versions
Running on/withPlatform Versions
Telestar
Imperial I600
All versions

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (8)

Source: cve@mitre.org
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.