CVE-2019-16412

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. (Prohibition of this zero value is only enforced within the GUI.)

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/Gr3gPr1est/BugReport/blob/master/CVE-2019-16412.pdfExploit, Third Party Advisory
https://github.com/Gr3gPr1est/BugReport/blob/master/CVE-2019-16412.pdfExploit, Third Party Advisory

Timeline

Published: Sep 19, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-164137.5An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_CVE-2019-164146.1A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's clear CVE-2019-164165.4HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.CVE-2019-164175.4HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.CVE-2019-16426.1A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, re CVE-2019-16436.1A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to condu CVE-2019-16447.5A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote att CVE-2019-164449.8Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301 CVE-2019-164459.8Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301 CVE-2019-164469.8Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301 CVE-2019-164477.8Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. Successful exploitation could lead to local code execut CVE-2019-164489.8Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301