Security readout for executives and security teams
Plain-English summary
This CVE describes a ChinaMobile PLC wireless router that may let anyone remotely trigger a reboot without logging in. The main business impact is service interruption, not confirmed data theft or system takeover. Risk is higher where these routers support industrial or remote operations and are reachable from the internet or untrusted networks.
Executive priority
Prioritize review if these routers support operational technology, remote sites, or safety-adjacent processes. The issue can disrupt availability without authentication, but evidence does not show confirmed active exploitation or broader compromise capability.
Technical view
CVE-2019-1010136 is an incorrect access control issue affecting ChinaMobile GPN2.4P21-C-CN version W2001EN-00. Reboot settings are reportedly accessible to unauthenticated remote users. Public references include a Shodan search and Exploit Database entry, but the bundle has no CVSS vector, CWE mapping, vendor advisory, or patch details.
Likely exposure
Exposure appears limited to ChinaMobile GPN2.4P21-C-CN routers running W2001EN-00. Highest concern is devices with the management interface reachable from the internet, partner networks, or other untrusted segments. The Shodan reference suggests discoverability may be possible, but no exposed-device count is provided.
Exploitation context
The CVE includes a public Exploit Database reference, so proof-of-concept knowledge appears public. CISA KEV status is false in the bundle, and no cited source states active exploitation. Treat this as public exploit availability, not confirmed real-world exploitation.
Researcher notes
The public record is sparse: no CVSS, CWE, patch reference, or vendor remediation is included. The Exploit Database reference supports public exploit availability, while the Shodan reference supports exposure hunting context. Avoid assuming endpoint details or affected variants beyond GPN2.4P21-C-CN W2001EN-00.
Mitigation direction
- Check ChinaMobile or supplier guidance for firmware updates or supported mitigations.
- Remove router management interfaces from direct internet exposure.
- Restrict management access to trusted admin networks or VPN paths.
- Segment PLC and operational networks from general user networks.
- Monitor for unexpected reboots and availability interruptions.
Validation and detection
- Inventory ChinaMobile GPN2.4P21-C-CN devices and confirm firmware version W2001EN-00.
- Verify management interfaces are not reachable from untrusted networks.
- Review firewall and access-control rules protecting router administration paths.
- Check uptime, event logs, and monitoring for unexplained reboot patterns.
- Document compensating controls where no vendor patch is available.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2019-1010136 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.shodan.io/search?query=title%3APLC++pstVal-%3Evalue%3Ahtml%2Findex.htmlCVE reference · x_refsource_MISC
- Exploit DatabaseCVE reference · exploit, x_refsource_EXPLOIT-DB
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.