[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2bOorwwZk5etY-eqS85rZiFXhTDMqbgBI7xlL4NbR20":3,"g5a-risk:CVE-2019-19825":259},{"success":4,"data":5,"meta":257},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":94,"references":95,"referencesCount":115,"weaknesses":116,"weaknessesCount":125,"isActivelyExploited":126,"cisaInfo":27,"otxData":27,"relatedBlogPosts":127,"seoMetadata":128,"configurations":153,"relatedVendorCves":241,"notableEvents":242},"CVE-2019-19825","What is CVE-2019-19825?","On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {\"topicurl\":\"setting\u002FgetSanvas\"} POST to the boafrm\u002FformLogin URI, leading to a CAPTCHA bypass. (Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can perform router actions via HTTP requests with Basic Authentication.) This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.","On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {\"topicurl\":\"setting\u002FgetSanvas\"} POST to the boafrm\u002FformLogin URI, le...","2020-01-27T17:15:12.167","2020-02-05T14:35:31.347",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.29557,[39,39,39,39,39,39,39],"Critical",[43,48,52,55,58,61,64,67,70,73,76,79,82,85,88,91],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"totolink","a3002ru_firmware","*","cpe:2.3:o:totolink:a3002ru_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"a3002ru","-","cpe:2.3:h:totolink:a3002ru:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":46,"criteria":54,"vulnerable":4},"a702r_firmware","cpe:2.3:o:totolink:a702r_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":50,"criteria":57,"vulnerable":4},"a702r","cpe:2.3:h:totolink:a702r:-:*:*:*:*:*:*:*",{"vendor":44,"product":59,"version":46,"criteria":60,"vulnerable":4},"n301rt_firmware","cpe:2.3:o:totolink:n301rt_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":62,"version":50,"criteria":63,"vulnerable":4},"n301rt","cpe:2.3:h:totolink:n301rt:-:*:*:*:*:*:*:*",{"vendor":44,"product":65,"version":46,"criteria":66,"vulnerable":4},"n302r_firmware","cpe:2.3:o:totolink:n302r_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":68,"version":50,"criteria":69,"vulnerable":4},"n302r","cpe:2.3:h:totolink:n302r:-:*:*:*:*:*:*:*",{"vendor":44,"product":71,"version":46,"criteria":72,"vulnerable":4},"n300rt_firmware","cpe:2.3:o:totolink:n300rt_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":74,"version":50,"criteria":75,"vulnerable":4},"n300rt","cpe:2.3:h:totolink:n300rt:-:*:*:*:*:*:*:*",{"vendor":44,"product":77,"version":46,"criteria":78,"vulnerable":4},"n200re_firmware","cpe:2.3:o:totolink:n200re_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":80,"version":50,"criteria":81,"vulnerable":4},"n200re","cpe:2.3:h:totolink:n200re:-:*:*:*:*:*:*:*",{"vendor":44,"product":83,"version":46,"criteria":84,"vulnerable":4},"n150rt_firmware","cpe:2.3:o:totolink:n150rt_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":86,"version":50,"criteria":87,"vulnerable":4},"n150rt","cpe:2.3:h:totolink:n150rt:-:*:*:*:*:*:*:*",{"vendor":44,"product":89,"version":46,"criteria":90,"vulnerable":4},"n100re_firmware","cpe:2.3:o:totolink:n100re_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":92,"version":50,"criteria":93,"vulnerable":4},"n100re","cpe:2.3:h:totolink:n100re:-:*:*:*:*:*:*:*",16,[96,102,107,110],{"url":97,"source":98,"tags":99},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F156083\u002FRealtek-SDK-Information-Disclosure-Code-Execution.html","Packetstormsecurity",[100,101],"Third Party Advisory","VDB Entry",{"url":103,"source":104,"tags":105},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2020\u002FJan\u002F36","Seclists",[106,100],"Mailing List",{"url":108,"source":104,"tags":109},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2020\u002FJan\u002F38",[106,100],{"url":111,"source":112,"tags":113},"https:\u002F\u002Fsploit.tech","Sploit",[114,100],"Exploit",4,[117],{"id":118,"name":119,"description":120,"extendedDescription":121,"status":122,"abstraction":123,"structure":124},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":129,"metaDescription":130,"keywords":131,"canonicalUrl":132,"structuredData":133},"What is CVE-2019-19825? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-19825, a critical severity cyber security vulnerability from 2020. On certain TOTOLINK Realtek SDK based routers, the CAPT...","CVE-2019-19825, CVE-2019-19825 vulnerability, CVE-2019-19825 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, totolink security, a3002ru_firmware vulnerability, a3002ru vulnerability, a702r_firmware vulnerability, a702r vulnerability, n301rt_firmware vulnerability","\u002Fwhat-is\u002Fcve-2019-19825",{"@context":134,"@type":135,"headline":129,"description":130,"datePublished":10,"dateModified":11,"author":136,"publisher":140,"about":144,"mainEntityOfPage":148,"articleSection":151,"keywords":152},"https:\u002F\u002Fschema.org","TechArticle",{"@type":137,"name":138,"url":139},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":137,"name":138,"url":139,"logo":141},{"@type":142,"url":143},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":145,"name":6,"description":146,"additionalType":147},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":149,"@id":150},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-19825","Cybersecurity","CVE-2019-19825, CVE-2019-19825 vulnerability, CVE-2019-19825 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[154,167,178,189,200,210,221,231],{"Operator":155,"Negate":27,"Nodes":156},"AND",[157,163],{"Operator":158,"Negate":27,"CPEMatch":159},"OR",[160],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":162},"87EC51C9-338B-4E98-8455-069319320802","2.0.0",{"Operator":158,"Negate":27,"CPEMatch":164},[165],{"Vulnerable":27,"Criteria":51,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"21945D3C-27AA-4614-8D5D-C22DE8C56F94",{"Operator":155,"Negate":27,"Nodes":168},[169,174],{"Operator":158,"Negate":27,"CPEMatch":170},[171],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":172,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":173},"28C67D43-7914-4AF3-9DF8-E1BF41F1AC89","2.1.3",{"Operator":158,"Negate":27,"CPEMatch":175},[176],{"Vulnerable":27,"Criteria":57,"MatchCriteriaID":177,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"49D3C58B-4632-464E-A0A6-33807E9A1842",{"Operator":155,"Negate":27,"Nodes":179},[180,185],{"Operator":158,"Negate":27,"CPEMatch":181},[182],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":183,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":184},"87A0ECEA-3FA7-4ADF-ACFA-6C4B93373DA3","2.1.6",{"Operator":158,"Negate":27,"CPEMatch":186},[187],{"Vulnerable":27,"Criteria":63,"MatchCriteriaID":188,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EE1ED560-8B9F-40D2-AD91-6D5D4290ED79",{"Operator":155,"Negate":27,"Nodes":190},[191,196],{"Operator":158,"Negate":27,"CPEMatch":192},[193],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":194,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":195},"71A22EA9-F5A5-4789-96F4-3C8600BC4848","3.4.0",{"Operator":158,"Negate":27,"CPEMatch":197},[198],{"Vulnerable":27,"Criteria":69,"MatchCriteriaID":199,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D0E1D2C0-02F5-4933-9DEB-89F711052D69",{"Operator":155,"Negate":27,"Nodes":201},[202,206],{"Operator":158,"Negate":27,"CPEMatch":203},[204],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":205,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":195},"7E826FD1-C8F6-4301-972F-1B3949F59275",{"Operator":158,"Negate":27,"CPEMatch":207},[208],{"Vulnerable":27,"Criteria":75,"MatchCriteriaID":209,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F0581174-E6B1-4E3D-8384-7852EC53FC14",{"Operator":155,"Negate":27,"Nodes":211},[212,217],{"Operator":158,"Negate":27,"CPEMatch":213},[214],{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":215,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":216},"47025B3A-648B-4F89-AEA0-C76B348CBAFB","4.0.0",{"Operator":158,"Negate":27,"CPEMatch":218},[219],{"Vulnerable":27,"Criteria":81,"MatchCriteriaID":220,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9FF7FF59-DB13-4FEA-A81C-124048BF1676",{"Operator":155,"Negate":27,"Nodes":222},[223,227],{"Operator":158,"Negate":27,"CPEMatch":224},[225],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":226,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":195},"E096F9E2-08E5-4B44-A83A-FB659D898DB5",{"Operator":158,"Negate":27,"CPEMatch":228},[229],{"Vulnerable":27,"Criteria":87,"MatchCriteriaID":230,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7525BE05-F394-4ED7-B7A6-F9005EDE90D7",{"Operator":155,"Negate":27,"Nodes":232},[233,237],{"Operator":158,"Negate":27,"CPEMatch":234},[235],{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":236,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":195},"635C33EA-BEF1-4C7E-8E3A-5ED5DF79358D",{"Operator":158,"Negate":27,"CPEMatch":238},[239],{"Vulnerable":27,"Criteria":93,"MatchCriteriaID":240,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"30CA1251-C9EA-498E-9AD4-627CA9B1A007",[],[243,250],{"id":244,"eventType":245,"eventTime":246,"details":247,"label":248,"color":249},"4e649dbf-fe95-4749-b2d8-feb2f3b29806","HIGH_EPSS_DELTA","2025-11-23T04:05:50.087722+00:00","Daily EPSS score increased by 0.544 on 2023-12-30","EPSS Score Increased","red",{"id":251,"eventType":252,"eventTime":253,"details":254,"label":255,"color":256},"f306c124-c9e1-4642-8671-b33f121a1639","LOW_EPSS_DELTA","2025-12-19T04:05:32.257741+00:00","Daily EPSS score decreased by 0.263 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":258,"version":33},1792333038289,{"score":260,"band":41,"action":261,"scoredAt":262},90,"Emergency patch","2026-10-16T06:47:48.162543+00:00"]