CVE-2019-12168

—

CVSS 3.0

7.2 high

EPSS

5%p92

Published

May 17, 2019 (May 17, 2019)

Modified

Jun 17, 2026

Description

Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell (aka Administration > Commands) screen.

Vendors: four-faith
Products: f3x24 firmware
Weakness: CWE-862
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.9%)

In the news2 stories

15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials

The Hacker NewsDec 31, 04:29 UTC · Dec 31, 2024Exploit / PoC in the wildCVE-2024-12856 CVE-2019-12168

60

Threat actors attempt to exploit a flaw in Four

Security AffairsDec 30, 09:04 UTC · Dec 30, 2024Threat actor in the wildCVE-2024-12856 CVE-2019-12168

60