PatchTheCVECVE-2019-16273: DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb)
CVE-2019-16273 is a critical-severity flaw (CVSS 9.8) affecting d5 firmware, d7 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the Android OS.
Why this priority
- Critical severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 2.3% (top 17%) |
| CISA exploited list | No |
| Published | 2020-01-06 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-16273?
d5 firmware: upgrade to 1.3.4; d7 firmware: upgrade to 1.3.4. Exact commands for each OS are on this page.
Is CVE-2019-16273 being exploited?
CVE-2019-16273 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-16273 affect?
CVE-2019-16273 affects d5 firmware, d7 firmware. Severity is critical (CVSS 9.8). DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from
How urgent is CVE-2019-16273?
Priority 60/100. Critical severity; Remotely exploitable, no login, no user action
Software pages
Windows vulnerabilities · Android vulnerabilities · Zoom vulnerabilities
Related CVEs
- CVE-2019-16274 HIGH 7.5 UPGRADE UPGRADE DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.
- CVE-2019-16272 CRITICAL 9.8 UPGRADE UPGRADE On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge
- CVE-2019-16271 MEDIUM 5.3 UPGRADE UPGRADE DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via s