CVE-2019-11219

—

CVSS 3.0

8.2 high

EPSS

2%p74

Published

Apr 26, 2019 (Apr 26, 2019)

Modified

Jun 17, 2026

Description

The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices.

Vendors: ilnkp2p project
Products: ilnkp2p
Weakness: CWE-330
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news2 stories

Millions of IoT Devices exposed to remote hacks due to iLnkP2P flaws

Security AffairsApr 28, 18:18 UTC · Apr 28, 2019Exploit / PoC CVE-2019-11219 CVE-2019-11220

P2P Weakness Exposes Millions of IoT Devices

Krebs on SecurityApr 26, 14:30 UTC · Apr 26, 2019Exploit / PoC CVE-2019-11219 CVE-2019-11220