CVE-2018-19015 in CX-Supervisor

Résumé

par MITRE

An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. An attacker could exploit this to execute code under the privileges of the application.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 06/11/2018
• Divulgation: 28/01/2019
• Modérer: accepté
• Entrée: VDB-130284
• CPE: prêt
• CWE: CWE-77 (confirmé)
• CVSS: 7.3 (NVD)
• EPSS: 0.00173
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-19015
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-19015
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-19015/