CVE-2019-12789 describes a critical vulnerability in Actiontec T2200H T2200H-31.128L.08 devices, specifically those distributed by Telus. An attacker with physical access can connect a UART adapter and, using a special key sequence, gain root shell access to the device. This allows for complete compromise, including permanent modification, bricking, disabling vendor management, and installing malicious code. The vulnerability has a CVSS score of 6.8 (Medium), indicating a high impact on confidentiality, integrity, and availability, but requires physical access (Attack Vector: Physical). There is no known public exploit code (Metasploit, Nuclei, ExploitDB) or evidence of active exploitation (KEV: No). Community discussion and media coverage are minimal, suggesting low public awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
t2200h-31.1238l.08CPE matchmatch criteria | cpe:2.3:o:actiontec:t2200h_firmware:t2200h-31.1238l.08:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.