CVE-2019-13405

Name of the Vulnerable Software and Affected Versions Advan VD-1 firmware version 230

Description A broken access control issue allows an attacker to send a POST request to "cgibin/AdbSetting.cgi" and enable ADB without authentication, potentially leading to the device being used as a relay or for installing mining software.

Recommendations For Advan VD-1 firmware version 230, consider disabling the ADB service until a patch is available to prevent exploitation. Restrict access to the "cgibin/AdbSetting.cgi" endpoint to minimize the risk of unauthorized ADB enablement.