PT-2019-15052 · Intellian · Intellian Remote Access

Capitan Alfalo · Publicado 2019-10-06 · Atualizado 2019-10-09 · CVE-2019-17269

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intellian Remote Access version 3.18

Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field.

Recommendations For Intellian Remote Access version 3.18, consider restricting access to the Ping Test field to minimize the risk of exploitation until a patch is available.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-17269

Produtos afetados

Intellian Remote Access

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-17269 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-17269 · Nota de Segurança
• https://misteralfa-hack.blogspot.com/2019/10/intellian-intellian-remote-access-rce.html · Nota