What’s Vulnerable › Vulnerabilities

CVE-2019-7745

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-07 · updated 2026-06-17

Description

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request and then reading the wpa_security_key field.

Affected products

• Jio Jmr1140 Firmware: amtel_jmr1140_r12.07

References

• http://packetstormsecurity.com/files/151655/Jiofi-4-JMR-1140-WiFi-Password-Cross-Site-Request-Forgery.html
• https://jiosecuritybugs.blogspot.com/2019/02/cve-2019-7745-jiofi-4-jmr1140.html
• https://www.exploit-db.com/exploits/46364/
• http://packetstormsecurity.com/files/151655/Jiofi-4-JMR-1140-WiFi-Password-Cross-Site-Request-Forgery.html
• https://jiosecuritybugs.blogspot.com/2019/02/cve-2019-7745-jiofi-4-jmr1140.html
• https://www.exploit-db.com/exploits/46364/

Get alerted when CVE-2019-7745 or the next vulnerability affects your stack