CVE-2019-13525

—

CVSS 3.1

5.3 medium

EPSS

1%p68

Published

Oct 25, 2019 (Oct 25, 2019)

Modified

Jun 17, 2026

Description

In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data, which can be accessed without authentication over the network.

Vendors: honeywell
Products: ip-ak2 firmware
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.