CVE-2019-15497

CRITICAL

Black Box iCOMPEL 9.2.3-11.1.4 - Use of Hard-coded Credentials

Title source: llm

Description

Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that allow remote attackers to access devices remotely via SSH, HTTP, HTTPS, and FTP.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://experiencesofasysadmin.wordpress.com/2019/08/23/cve-2019-15497-default-credentials/

Scores

CVSS v3 9.8

EPSS 0.0293

EPSS Percentile 85.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-798

Status published

Products (2)

blackbox/icompel_firmware 9.2.3 - 11.1.4

onelan/net-top-box_firmware 9.2.3 - 11.1.4

Published Aug 26, 2019

Tracked Since Feb 18, 2026