Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-13406

Advan VD-1 has a vulnerability that allows remote arbitrary APK installation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AndroVideo Advan VD-1 firmware

  • up to 230affected

References