What’s Vulnerable › Vulnerabilities
CVE-2019-12289
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-05-23 · updated 2026-06-17
- Weakness: CWE-306
Description
An issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C7824WIP) CH-sys-48.53.75.119~123 and 200V (C38S) CH-sys-48.53.203.119~123 devices. A remote command can be executed through a system firmware update without authentication. The attacker can modify the files within the internal firmware or even steal account information by executing a command.
Affected products
- Vstracam C38S Firmware: ch-sys-48.53.203.119~123
- Vstracam C7824Wip Firmware: ch-sys-48.53.75.119~123
References
Get alerted when CVE-2019-12289 or the next vulnerability affects your stack