CVE-2019-7311: linksys wrt1900acs_firmware Missing Encryption of Sensitive Data
Vulnerability summary
CVE-2019-7311 is a high (CVSS 7.8) Missing Encryption of Sensitive Data vulnerability in linksys wrt1900acs_firmware. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.7% of scored vulnerabilities.
Timeline
- 06-06-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie (admin-auth) is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router. The admin password is stored in base64 cleartext in an "admin-auth" cookie. An attacker sniffing the network at the time of login could acquire the router's admin password. Alternatively, gaining physical access to the victim's computer soon after an administrative login could result in compromise.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
8%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.18% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Linksys1 product
- wrt1900acs_firmware1.0.3.187766
1 vendor · 1 product
References
2 links- www.x0rsecurity.com/2019/05/03/my-first-cve-linksys-wrt-1300-acs-cve-2019-7311/X Refsource MISCThird Party Advisory