CVE-2019-13406

Advan VD-1 has a vulnerability that allows remote arbitrary APK installation

published August 29, 2019

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01572 · 75.2th percentile
Published
2019-08-29T00:19Z
EPSS history
Timeline
  • 29 AUG 00:19Z
    Advan VD-1 has a vulnerability that allows remote arbitrary APK installation
    cvelistv5