CVE-2018-20219

CVE-2018-20219 describes an authentication bypass vulnerability in Teracue ENC-400 devices with firmware 2.56 and below, affecting various ENC-400 HDMI and HDSDI models. The flaw stems from a hard-coded authentication cookie, allowing an attacker who obtains this token to maintain persistent access to the web administration panel without needing the password. This vulnerability carries a CVSS score of 8.1 (HIGH), indicating a high potential for impact on confidentiality, integrity, and availability due to its network-based attack vector and low attack complexity. While not listed in CISA's KEV catalog, an exploit for command injection and missing authentication related to this device is available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.