PT-2019-12149 · Mirasys · Mirasys Vms

Joachim Kerschbaumer · Published 2019-08-22 · Updated 2019-08-30 · CVE-2019-11029

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mirasys VMS versions prior to 7.6.1 Mirasys VMS versions 8.x prior to 8.3.2

Description The issue concerns the mishandling of the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use .. with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc., and might cause a serious impact on confidentiality.

Recommendations For versions prior to 7.6.1, update to version 7.6.1 or later. For versions 8.x prior to 8.3.2, update to version 8.3.2 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-11029

Affected Products

Mirasys Vms

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-11029 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11029 · Vendor Advisory
• https://kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution · Note