PatchTheCVECVE-2019-15653: Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication
CVE-2019-15653 is a high-severity flaw (CVSS 7.5) affecting ap2600-i - a02 - 0202n00pd2 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism. The HTML source code of the login page contains values that allow obtaining the username and password. The username are password values are a double md5 of the plaintext real value, i.e., md5(md5(value)).
Why this priority
- High severity
- Public exploit reference
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-15653?
ap2600-i - a02 - 0202n00pd2 firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2019-15653 being exploited?
CVE-2019-15653 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-15653 affect?
CVE-2019-15653 affects ap2600-i - a02 - 0202n00pd2 firmware. Severity is high (CVSS 7.5). Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism. The HTML source code of the login page contains values that allow obtaining the username and password. The username are
How urgent is CVE-2019-15653?
Priority 51/100. High severity; Public exploit reference; Remotely exploitable, no login, no user action