CVE-2019-13473

Critical

Description

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root access.

SeverityCritical
CVSS9.8
Exploit probability—
ProductTelestar Bobs Rock Radio Firmware
PublishedSep 11, 2019
First seenSep 11, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
telestar bobs_rock_radio_firmwareNo range specified—
telestar dabman_d10_firmwareNo range specified—
telestar dabman_i30_stereo_firmwareNo range specified—
telestar imperial_i110_firmwareNo range specified—
telestar imperial_i150_firmwareNo range specified—
telestar imperial_i200_firmwareNo range specified—
telestar imperial_i200-cd_firmwareNo range specified—
telestar imperial_i400_firmwareNo range specified—
telestar imperial_i450_firmwareNo range specified—
telestar imperial_i500-bt_firmwareNo range specified—
telestar imperial_i600_firmwareNo range specified—
auna connect_100_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.