CVE-2019-15312

HIGH

8.8

CVSS Severity Score

EPSS Score0.0820%

EPSS Percentile9.59th

PublishedJul 1, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an attacker to compromise the victim device from the Internet.

Affected Platforms (CPE)

💻

Linkplay

All versions

References & Advisories

🔗 https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/

🔗 https://labs.mwrinfosecurity.com/advisories/

🔗 https://linkplay.com/featured-products/