CVE-2019-19823

CVE-2019-19823 describes a critical information disclosure vulnerability in various router administration interfaces, including Realtek APMIB 0.11f, affecting numerous TOTOLINK, Rutek, Sapido, and other vendor devices. The flaw involves storing administrative passwords in cleartext within flash memory and a file, making them easily accessible. With a CVSS score of 7.5 (High), this vulnerability allows unauthenticated remote attackers to gain full access to router configurations due to the lack of authentication and network-based attack vector. While there is no evidence of active exploitation or Metasploit modules, Nuclei templates exist for information disclosure, and the vulnerability has a high FAUCET Risk Score, indicating significant potential impact despite limited community discussion or media coverage.