What’s Vulnerable › Vulnerabilities

CVE-2019-7404

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-05-13 · updated 2026-06-17
• Weakness: CWE-306

Description

An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file via an HTTP request containing its full pathname, such as http://192.168.0.1/var/gapm7100_${today's_date}.log for reading a filename such as gapm7100_190101.log.

Affected products

• LG Gamp-7100 Firmware: all versions
• LG Gapm-7200 Firmware: all versions
• LG Gapm-8000 Firmware: all versions

References

• https://github.com/epistemophilia/CVEs/blob/master/LG-GAMP-Routers/CVE-2019-7404/poc-cve-2019-7404.py
• https://github.com/epistemophilia/CVEs/blob/master/LG-GAMP-Routers/CVE-2019-7404/poc-cve-2019-7404.py

Get alerted when CVE-2019-7404 or the next vulnerability affects your stack