Read the docs
TI-2019-04596 Aliases CVE-2019-6542GHSA-rg4v-m3x7-gg8h

Missing authentication in ENTTEC Datagate MK2

Priority LOW 36CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-306.

Summary

ENTTEC Datagate MK2, Storm 24, Pixelator all firmware versions prior to (70044,70050,70060)_update_05032019-482 allows an unauthenticated user to initiate a remote reboot, which may be used to cause a denial of service condition.

Why it matters now

EPSS 0.01516 74th percentileScored 2026-11-07
Fix Fixed Datagate MK2 (ENTTEC): 70044_update_05032019-482Storm 24 (ENTTEC): 70050_update_05032019-482+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ENTTECDatagate MK2before 70044_update_05032019-48270044_update_05032019-482Patch availableCNA
ENTTECStorm 24before 70050_update_05032019-48270050_update_05032019-482Patch availableCNA
ENTTECPixelatorbefore 70060_update_05032019-48270060_update_05032019-482Patch availableCNA
  • Datagate MK2 VendorENTTEC Affected before 70044_update_05032019-482 Fixed in 70044_update_05032019-482 Patch available CNA
  • Storm 24 VendorENTTEC Affected before 70050_update_05032019-482 Fixed in 70050_update_05032019-482 Patch available CNA
  • Pixelator VendorENTTEC Affected before 70060_update_05032019-482 Fixed in 70060_update_05032019-482 Patch available CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:o:enttec:datagate_mk2_firmware:*:*:*:*:*:*:*:*before 70044_update_05032019-482VulnerableENTTEC
cpe:2.3:h:enttec:datagate_mk2:-:*:*:*:*:*:*:*not specified by NVDRunning onENTTEC
cpe:2.3:o:enttec:storm_24_firmware:*:*:*:*:*:*:*:*before 70050_update_05032019-482VulnerableENTTEC
cpe:2.3:h:enttec:storm_24:-:*:*:*:*:*:*:*not specified by NVDRunning onENTTEC
cpe:2.3:o:enttec:pixelator_firmware:*:*:*:*:*:*:*:*before 70060_update_05032019-482VulnerableENTTEC
cpe:2.3:h:enttec:pixelator:-:*:*:*:*:*:*:*not specified by NVDRunning onENTTEC
  • cpe:2.3:o:enttec:datagate_mk2_firmware:*:*:*:*:*:*:*:* Versions before 70044_update_05032019-482 Vulnerable ·ENTTEC
  • cpe:2.3:h:enttec:datagate_mk2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ENTTEC
  • cpe:2.3:o:enttec:storm_24_firmware:*:*:*:*:*:*:*:* Versions before 70050_update_05032019-482 Vulnerable ·ENTTEC
  • cpe:2.3:h:enttec:storm_24:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ENTTEC
  • cpe:2.3:o:enttec:pixelator_firmware:*:*:*:*:*:*:*:* Versions before 70060_update_05032019-482 Vulnerable ·ENTTEC
  • cpe:2.3:h:enttec:pixelator:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ENTTEC

Remediation

  • Fix · CNA Datagate MK2 (ENTTEC) Fixed in 70044_update_05032019-482
  • Fix · CNA Storm 24 (ENTTEC) Fixed in 70050_update_05032019-482
  • Fix · CNA Pixelator (ENTTEC) Fixed in 70060_update_05032019-482

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-6542
  2. 2026-10-03 Alias added: GHSA-rg4v-m3x7-gg8h

References

Advisory 1

  • TI-2019-09563 An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer… CVSS 3.0CRITICAL 9.8
  • TI-2019-09562 An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer… CVSS 3.0HIGH 8.8
  • TI-2019-09564 An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer… CVSS 3.0HIGH 7.8
  • TI-2019-09561 A number of stored XSS vulnerabilities have been identified in the web configuration… CVSS 3.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences