CVE-2019-9229

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers can authenticate with the default 1234 password that cannot be changed, and can execute malicious and unauthorized actions.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Jul 20, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-92306.1An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.CVE-2019-92318.8An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.CVE-2019-92327.5In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no adCVE-2019-92337.5In wpa_supplicant_8, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosuCVE-2019-92347.5In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure CVE-2019-92355.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiCVE-2019-92365.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiCVE-2019-92376.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2019-92386.5In the NFC stack, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiCVE-2019-92395.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiCVE-2019-92405.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiCVE-2019-92417.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no
CVE-2019-9229: High severity, CVSS 8.8 | Vulnix