{"vulnerability": "cve-2020-1941", "sightings": [{"uuid": "2239b850-1dcf-496a-aeba-ebff27aef3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19417", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2876", "content": "#exploit\n#WLAN_Security\n1. CVE-2020-19417:\nEmerson Smart Wireless Gateway 1420 4.6.59 - Privilege Escalation\nhttps://packetstormsecurity.com/files/161700/eswg14204659-escalate.txt \n2. CVE-2020-19419:\nIncorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 Administrator Console\nhttps://seclists.org/fulldisclosure/2021/Mar/12\n3. VOOdoo - Remotely Compromising NETGEAR CG3700B Cable Modems\nhttps://quentinkaiser.be/security/2021/03/09/voodoo", "creation_timestamp": "2024-05-07T14:30:02.000000Z"}, {"uuid": "4a325eb6-b411-466e-987d-e8fb550902a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19419", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2876", "content": "#exploit\n#WLAN_Security\n1. CVE-2020-19417:\nEmerson Smart Wireless Gateway 1420 4.6.59 - Privilege Escalation\nhttps://packetstormsecurity.com/files/161700/eswg14204659-escalate.txt \n2. CVE-2020-19419:\nIncorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 Administrator Console\nhttps://seclists.org/fulldisclosure/2021/Mar/12\n3. VOOdoo - Remotely Compromising NETGEAR CG3700B Cable Modems\nhttps://quentinkaiser.be/security/2021/03/09/voodoo", "creation_timestamp": "2024-05-07T14:30:02.000000Z"}, {"uuid": "93cf0903-5774-41dd-8f7c-423bf09a2828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19419", "type": "seen", "source": "https://t.me/cissp/2492", "content": "The DFIR Report:\n\"Bazar Drops the Anchor\"\nhttps://thedfirreport.com/2021/03/08/bazar-drops-the-anchor\n\nWLAN_Security\n1. CVE-2020-19417:\nEmerson Smart Wireless Gateway 1420 4.6.59 - Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/161700/eswg14204659-escalate.txt \n\n2. CVE-2020-19419:\nIncorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 Administrator Console (PoC)\nhttps://seclists.org/fulldisclosure/2021/Mar/12\n\n3. VOOdoo - Remotely Compromising NETGEAR CG3700B Cable Modems\nhttps://quentinkaiser.be/security/2021/03/09/voodoo\n\nRed Team Tactics\n1. Auth Bypass through HTTP Request Smuggling\nhttps://bugcrowd.com/disclosures/5e1f7404-5421-4f3d-916a-443446afbb52/authentication-bypass-through-http-request-smuggling-on-https-apm-ap-tesla-services\n\n2. Exploiting HTTP Request Smuggling (TE.CL) - XSS to website takeover\nhttps://infosecwriteups.com/exploiting-http-request-smuggling-te-cl-xss-to-website-takeover-c0fc634a661b\n\n3. Open redirect Payloads\nhttps://ismailtasdelen.medium.com/open-redirect-payload-list-cf77f0ecb2a0\n\n4. Unicode normalization in webapps are often helpful in bypassing restrictions when it comes to WAF bypasses and SSRF:\n\uff1csvg \u2044onload\uff1dalert\ufe351)>\n...turns to...\n\n\nChecklist:\nhttps://appcheck-ng.com/wp-content/uploads/unicode_normalization.html", "creation_timestamp": "2026-09-01T17:01:00.509544Z"}, {"uuid": "297c6ae1-451b-4067-afce-b4b71ec3b485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19417", "type": "seen", "source": "https://t.me/cissp/2492", "content": "The DFIR Report:\n\"Bazar Drops the Anchor\"\nhttps://thedfirreport.com/2021/03/08/bazar-drops-the-anchor\n\nWLAN_Security\n1. CVE-2020-19417:\nEmerson Smart Wireless Gateway 1420 4.6.59 - Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/161700/eswg14204659-escalate.txt \n\n2. CVE-2020-19419:\nIncorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 Administrator Console (PoC)\nhttps://seclists.org/fulldisclosure/2021/Mar/12\n\n3. VOOdoo - Remotely Compromising NETGEAR CG3700B Cable Modems\nhttps://quentinkaiser.be/security/2021/03/09/voodoo\n\nRed Team Tactics\n1. Auth Bypass through HTTP Request Smuggling\nhttps://bugcrowd.com/disclosures/5e1f7404-5421-4f3d-916a-443446afbb52/authentication-bypass-through-http-request-smuggling-on-https-apm-ap-tesla-services\n\n2. Exploiting HTTP Request Smuggling (TE.CL) - XSS to website takeover\nhttps://infosecwriteups.com/exploiting-http-request-smuggling-te-cl-xss-to-website-takeover-c0fc634a661b\n\n3. Open redirect Payloads\nhttps://ismailtasdelen.medium.com/open-redirect-payload-list-cf77f0ecb2a0\n\n4. Unicode normalization in webapps are often helpful in bypassing restrictions when it comes to WAF bypasses and SSRF:\n\uff1csvg \u2044onload\uff1dalert\ufe351)>\n...turns to...\n\n\nChecklist:\nhttps://appcheck-ng.com/wp-content/uploads/unicode_normalization.html", "creation_timestamp": "2026-09-01T17:01:00.612357Z"}, {"uuid": "5b2e73f3-b456-4740-85ee-f5f296cc8291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19419", "type": "seen", "source": "https://t.me/cissp/2492", "content": "The DFIR Report:\n\"Bazar Drops the Anchor\"\nhttps://thedfirreport.com/2021/03/08/bazar-drops-the-anchor\n\nWLAN_Security\n1. CVE-2020-19417:\nEmerson Smart Wireless Gateway 1420 4.6.59 - Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/161700/eswg14204659-escalate.txt \n\n2. CVE-2020-19419:\nIncorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 Administrator Console (PoC)\nhttps://seclists.org/fulldisclosure/2021/Mar/12\n\n3. VOOdoo - Remotely Compromising NETGEAR CG3700B Cable Modems\nhttps://quentinkaiser.be/security/2021/03/09/voodoo\n\nRed Team Tactics\n1. Auth Bypass through HTTP Request Smuggling\nhttps://bugcrowd.com/disclosures/5e1f7404-5421-4f3d-916a-443446afbb52/authentication-bypass-through-http-request-smuggling-on-https-apm-ap-tesla-services\n\n2. Exploiting HTTP Request Smuggling (TE.CL) - XSS to website takeover\nhttps://infosecwriteups.com/exploiting-http-request-smuggling-te-cl-xss-to-website-takeover-c0fc634a661b\n\n3. Open redirect Payloads\nhttps://ismailtasdelen.medium.com/open-redirect-payload-list-cf77f0ecb2a0\n\n4. Unicode normalization in webapps are often helpful in bypassing restrictions when it comes to WAF bypasses and SSRF:\n\uff1csvg \u2044onload\uff1dalert\ufe351)>\n...turns to...\n\n\nChecklist:\nhttps://appcheck-ng.com/wp-content/uploads/unicode_normalization.html", "creation_timestamp": "2026-09-02T01:04:51.268413Z"}, {"uuid": "461250b2-c14f-4dd8-8d6c-adf46d00d34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19417", "type": "seen", "source": "https://t.me/cissp/2492", "content": "The DFIR Report:\n\"Bazar Drops the Anchor\"\nhttps://thedfirreport.com/2021/03/08/bazar-drops-the-anchor\n\nWLAN_Security\n1. CVE-2020-19417:\nEmerson Smart Wireless Gateway 1420 4.6.59 - Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/161700/eswg14204659-escalate.txt \n\n2. CVE-2020-19419:\nIncorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 Administrator Console (PoC)\nhttps://seclists.org/fulldisclosure/2021/Mar/12\n\n3. VOOdoo - Remotely Compromising NETGEAR CG3700B Cable Modems\nhttps://quentinkaiser.be/security/2021/03/09/voodoo\n\nRed Team Tactics\n1. Auth Bypass through HTTP Request Smuggling\nhttps://bugcrowd.com/disclosures/5e1f7404-5421-4f3d-916a-443446afbb52/authentication-bypass-through-http-request-smuggling-on-https-apm-ap-tesla-services\n\n2. Exploiting HTTP Request Smuggling (TE.CL) - XSS to website takeover\nhttps://infosecwriteups.com/exploiting-http-request-smuggling-te-cl-xss-to-website-takeover-c0fc634a661b\n\n3. Open redirect Payloads\nhttps://ismailtasdelen.medium.com/open-redirect-payload-list-cf77f0ecb2a0\n\n4. Unicode normalization in webapps are often helpful in bypassing restrictions when it comes to WAF bypasses and SSRF:\n\uff1csvg \u2044onload\uff1dalert\ufe351)>\n...turns to...\n\n\nChecklist:\nhttps://appcheck-ng.com/wp-content/uploads/unicode_normalization.html", "creation_timestamp": "2026-09-02T01:04:51.393697Z"}]}