What’s Vulnerable › Vulnerabilities

CVE-2019-17224

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-28 · updated 2026-06-17
• Weakness: CWE-22

Description

The web interface of the Compal Broadband CH7465LG modem (version CH7465LG-NCIP-6.12.18.25-2p6-NOSH) is vulnerable to a /%2f/ path traversal attack, which can be exploited in order to test for the existence of a file pathname outside of the web root directory. If a file exists but is not part of the product, there is a 404 error. If a file does not exist, there is a 302 redirect to index.html.

Affected products

• Compal Ch7465Lg Firmware: ch7465lg-ncip-6.12.18.25-2p6-nosh

References

• https://vulnerabilities.home.blog/2019/10/27/again-a-vunerability-in-cable-router-ch7465lg-cve-2019-17224/
• https://www.search-lab.hu/media/Compal_CH7465LG_Evaluation_Report_1.1.pdf
• https://vulnerabilities.home.blog/2019/10/27/again-a-vunerability-in-cable-router-ch7465lg-cve-2019-17224/
• https://www.search-lab.hu/media/Compal_CH7465LG_Evaluation_Report_1.1.pdf

Get alerted when CVE-2019-17224 or the next vulnerability affects your stack