CVE-2019-19967

7.5 highEPSS 1.0%

High (7.5) in upc connect box eurodocsis firmware. EPSS 1.0% chance of exploitation in the next 30 days.

The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2019-12-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

upc:connect_box_eurodocsis_firmware

References

https://github.com/filipi86/ConnectBoxDOCSIS-3.0
https://github.com/filipi86/ConnectBoxDOCSIS-3.0

Check your stack JSON