CVE-2019-25226
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-26

Last updated on: 2025-11-26

Assigner: VulnCheck

Description
Dongyoung Media DM-AP240T/W wireless access points contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/sys_system_config management endpoint. The endpoint allows remote retrieval of a compressed configuration archive without requiring authentication or authorization. The exposed configuration may include administrative credentials and other sensitive settings, enabling an unauthenticated attacker to obtain information that can facilitate further compromise of the device or network.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-26
Last Modified
2025-11-26
Generated
2026-06-16
AI Q&A
2025-11-27
EPSS Evaluated
2026-06-14
NVD
CVE-2019-25226
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
dongyoung_media dm-ap240t *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in Dongyoung Media DM-AP240T/W wireless access points, where the /cgi-bin/sys_system_config management endpoint allows anyone to remotely retrieve a compressed configuration archive without needing to authenticate or have authorization. This archive may contain administrative credentials and other sensitive settings, which means an attacker can gain access to critical information without any restrictions.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive configuration data, including administrative credentials. This can enable an attacker to further compromise the affected device or the network it is connected to, potentially leading to loss of control over the device, network breaches, and exposure of confidential information.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2019-25226. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart