CVE-2019-15312

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/07/2020
Last modified:
21/07/2021

Description

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an attacker to compromise the victim device from the Internet.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linkplay:linkplay:-:*:*:*:*:*:*:*