PatchTheCVECVE-2019-16271: DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via s
CVE-2019-16271 is a medium-severity flaw (CVSS 5.3) affecting d5 firmware, d7 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.6% (top 24%) |
| CISA exploited list | No |
| Weakness | CWE-306 |
| Published | 2020-01-06 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-16271?
d5 firmware: upgrade to 1.3.2; d7 firmware: upgrade to 1.3.2. Exact commands for each OS are on this page.
Is CVE-2019-16271 being exploited?
CVE-2019-16271 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-16271 affect?
CVE-2019-16271 affects d5 firmware, d7 firmware. Severity is medium (CVSS 5.3). DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.
How urgent is CVE-2019-16271?
Priority 42/100. Remotely exploitable, no login, no user action
Related CVEs
- CVE-2019-16274 HIGH 7.5 UPGRADE UPGRADE DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.
- CVE-2019-16273 CRITICAL 9.8 UPGRADE UPGRADE DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb)
- CVE-2019-16272 CRITICAL 9.8 UPGRADE UPGRADE On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge