← back
CVE-2019-18909

CVE-2019-18909

EPSS 2.2%
The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with root privileges.
Affected products
HP · ThinPro Linux

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/156907/HP-ThinPro-6.x-7.x-Citrix-Command-Injection.htmlhttp://seclists.org/fulldisclosure/2020/Mar/39https://support.hp.com/us-en/document/c06509350