CVE-2019-25249 | devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authenticat… | CVSS 9.8 CRITICAL

Description

devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script. Attackers can enable telnet and remote shell services, reboot the device, and gain root access without a password by manipulating system configuration parameters.

Metadata

CVE ID: CVE-2019-25249
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2025-12-24 14:27 UTC
Published: 2025-12-24 19:28 UTC
Last updated: 2025-12-24 20:22 UTC
Primary CWE: CWE-266
Incorrect Privilege Assignment
Vendor / Product: devolo AG / dLAN 550 duo+ Starter Kit
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
devolo AG	dLAN 550 duo+ Starter Kit	—	500 AV Wireless+ 3.1.0-1

Weakness (CWE)

CWE	Source	Description
CWE-266	cna	Incorrect Privilege Assignment

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.7	HIGH	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References (3)

ExploitDB-46325 https://www.exploit-db.com/exploits/46325
Official Vendor Homepage https://www.devolo.com
Zero Science Lab Disclosure (ZSL-2019-5508) https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5508.php