What’s Vulnerable › Vulnerabilities

CVE-2019-15497

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-08-26 · updated 2026-06-17
• Weakness: CWE-798

Description

Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that allow remote attackers to access devices remotely via SSH, HTTP, HTTPS, and FTP.

Affected products

• Blackbox Icompel Firmware: from 9.2.3 through 11.1.4
• Onelan Net-Top-Box Firmware: from 9.2.3 through 11.1.4

References

• https://experiencesofasysadmin.wordpress.com/2019/08/23/cve-2019-15497-default-credentials/
• https://experiencesofasysadmin.wordpress.com/2019/08/23/cve-2019-15497-default-credentials/

Get alerted when CVE-2019-15497 or the next vulnerability affects your stack