CVE-2019-13474

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial…

published September 16, 2019

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

⚠️ An unguarded treasure trove of commands is wide open for mischief! The TeleStar Bobs Rock Radio and various Imperial models lack sufficient access control on critical commands — that's like handing someone the keys to the backstage area without checking their credentials! 🎤 Think of these devices as a fancy restaurant where the kitchen door is left unlocked. Anyone can waltz in, change orders, or even take control of the chef's specials — no questions asked! 🍽️ An attacker could exploit this vulnerability to manipulate various functions of the device, such as changing settings at will or interrupting playback. This could lead to unauthorized control, potentially resulting in unwanted interruptions or even misconfiguration. Security hero status: activated! 🦸‍♂️

Put simply

Think of these devices as a fancy restaurant where the kitchen door is left unlocked. Anyone can waltz in, change orders, or even take control of the chef's specials — no questions asked! 🍽️ The vulnerability arises from insufficient access control for several commands on various TeleStar and Imperial devices, allowing unauthorized users to execute actions without proper authentication.

What to do

An attacker could exploit this vulnerability to manipulate various functions of the device, such as changing settings at will or interrupting playback. This could lead to unauthorized control, potentially resulting in unwanted interruptions or even misconfiguration. Security hero status: activated! 🦸‍♂️ To mitigate this risk, ensure that firmware is updated to the latest version provided by the manufacturer. Additionally, consider implementing network-level security measures to restrict access to these devices. Regular monitoring of device configurations can further enhance security. 🛡️ You can tackle this challenge! Follow these steps, and you'll fortify your devices in no time. You've got this! 🔧

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02534 · 84.8th percentile
Published
2019-09-16T00:00Z
EPSS history
Timeline
  • 16 SEP 00:00Z
    TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial…
    cvelistv5