HTTP: AVTECH Room Alert 3E Privilege Escalation

This signature detects attempts to exploit a known vulnerability against AVTECH Room Alert 3E. A successful attack can lead to elevation of privilege and arbitrary code execution.

Extended Description

On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in.

References

CVE: CVE-2019-13379

Short Name

HTTP:CTS:AVTECH-ROOMALRT-3E-PE

Severity

Critical

Recommended

False

Recommended Action

Drop

HTTP: AVTECH Room Alert 3E Privilege Escalation

Extended Description

References

Found a potential security threat?