CVE-2019-7669

Publicada em 01 jul 2019 · Atualizada em 04 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 31%

Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications within the application’s web root with root privileges.

Produtos afetados

n/a · n/a

Referências

http://packetstormsecurity.com/files/155270/FlexAir-Access-Control-2.3.38-Command-Injection.html https://applied-risk.com/labs/advisories https://www.applied-risk.com/resources/ar-2019-007 https://www.us-cert.gov/ics/advisories/icsa-19-211-02