CVE-2019-16340

PoC —

CVSS 3.1

9.8 critical

EPSS

19%p97

Published

Nov 21, 2019 (Nov 21, 2019)

Modified

Jun 17, 2026

Description

Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cgi URI.

Vendors: linksys
Products: velop whw0303 firmware, velop whw0302 firmware, velop whw0301 firmware
Weakness: CWE-425
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (19.3%)

In the news0 stories

No ingested article mentions this CVE yet.