What’s Vulnerable › Vulnerabilities

CVE-2019-19824

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 25.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-01-27 · updated 2026-06-17
• Weakness: CWE-78

Description

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and N302RE 2.0.2.

Affected products

• TOTOLINK A3002RU: through 2.0.0
• TOTOLINK A702R: through 2.1.3
• TOTOLINK N100Re Firmware: through 3.4.0
• TOTOLINK N150RT: through 3.4.0
• Totolink N200RE: through 4.0.0
• TOTOLINK N300Rt Firmware: through 3.4.0
• TOTOLINK N301Rt Firmware: through 2.1.6
• TOTOLINK N302R Firmware: through 3.4.0

References

• http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html
• http://seclists.org/fulldisclosure/2020/Jan/36
• http://seclists.org/fulldisclosure/2020/Jan/38
• https://github.com/yckuo-sdc/totolink-boa-api-vulnerabilities
• https://sploit.tech
• http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html
• http://seclists.org/fulldisclosure/2020/Jan/36
• http://seclists.org/fulldisclosure/2020/Jan/38
• https://sploit.tech

Get alerted when CVE-2019-19824 or the next vulnerability affects your stack