BaseFortify

Publication date: 2025-11-26

Last updated on: 2025-11-26

Assigner: VulnCheck

Description

Dongyoung Media DM-AP240T/W wireless access points contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/sys_system_config management endpoint. The endpoint allows remote retrieval of a compressed configuration archive without requiring authentication or authorization. The exposed configuration may include administrative credentials and other sensitive settings, enabling an unauthenticated attacker to obtain information that can facilitate further compromise of the device or network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-26

Last Modified

2025-11-26

Generated

2026-07-06

AI Q&A

2025-11-27

EPSS Evaluated

2026-07-05

NVD

CVE-2019-25226

Affected Vendors & Products

Vendor	Product	Version / Range
dongyoung_media	dm-ap240t	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Dongyoung Media DM-AP240T/W wireless access points, where the /cgi-bin/sys_system_config management endpoint allows anyone to remotely retrieve a compressed configuration archive without needing to authenticate or have authorization. This archive may contain administrative credentials and other sensitive settings, which means an attacker can gain access to critical information without any restrictions.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive configuration data, including administrative credentials. This can enable an attacker to further compromise the affected device or the network it is connected to, potentially leading to loss of control over the device, network breaches, and exposure of confidential information.

Hi! I’m here to help you understand CVE-2019-25226. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70