Approved changes feed: RSS · Atom

cpe:2.3:o:intenogroup:eg200_firmware:eg200-wu7p1u_adamo3.16.4-190226_1650:*:*:*:*:*:*:*

part: o version: eg200-wu7p1u_adamo3.16.4-190226_1650 update: *

VendorIntenogroup (a30b9004-1736-5c29-9995-4110ea41935c)
ProductEg200 Firmware (b35a24fb-9ef3-5073-babd-99934ef803fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13140 vulnerable 2026-06-08 05:12:40.980789 Details available
Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.
Published: 2019-09-16T16:24:48.000Z
Updated: 2024-08-04T23:41:10.451Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.