CVE-2019-25706: File Disclosure in Across DR-810

The primary impact of CVE-2019-25706 is the unauthorized exposure of sensitive router configuration data. Attackers can exploit this vulnerability by sending a simple GET request to the /rom-0 endpoint, bypassing authentication mechanisms. The retrieved backup file contains critical information, including router passwords, network settings, and potentially other sensitive credentials. Successful exploitation could lead to complete compromise of the router, enabling attackers to modify configurations, intercept network traffic, or use the router as a pivot point for further attacks within the network. The ease of exploitation, requiring only a simple HTTP request, significantly increases the potential for widespread compromise.

1. Reserved2026-04-12
2. Published2026-04-12
3. Modified2026-04-13
4. EPSS updated2026-04-20

Due to the absence of a direct patch for CVE-2019-25706, mitigation strategies focus on restricting access to the vulnerable endpoint. The most effective approach is to implement firewall rules or access control lists (ACLs) to block external access to the /rom-0 endpoint. Consider using a Web Application Firewall (WAF) to filter requests and prevent unauthorized access. Network segmentation can also limit the potential impact by isolating the DR-810 router from critical network resources. Regularly review router configurations and monitor network traffic for suspicious activity. Since a direct fix is unavailable, continuous monitoring is crucial.