What’s Vulnerable › Vulnerabilities

CVE-2019-19825

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 29.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-01-27 · updated 2026-06-17
• Weakness: CWE-287

Description

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. (Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can perform router actions via HTTP requests with Basic Authentication.) This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.

Affected products

• TOTOLINK A3002RU: through 2.0.0
• TOTOLINK A702R: through 2.1.3
• TOTOLINK N100Re Firmware: through 3.4.0
• TOTOLINK N150RT: through 3.4.0
• Totolink N200RE: through 4.0.0
• TOTOLINK N300Rt Firmware: through 3.4.0
• TOTOLINK N301Rt Firmware: through 2.1.6
• TOTOLINK N302R Firmware: through 3.4.0

References

• http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html
• http://seclists.org/fulldisclosure/2020/Jan/36
• http://seclists.org/fulldisclosure/2020/Jan/38
• https://sploit.tech
• http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html
• http://seclists.org/fulldisclosure/2020/Jan/36
• http://seclists.org/fulldisclosure/2020/Jan/38
• https://sploit.tech

Get alerted when CVE-2019-19825 or the next vulnerability affects your stack