PT-2019-15052 · Intellian · Intellian Remote Access

Capitan Alfalo · Published 2019-10-06 · Updated 2019-10-09 · CVE-2019-17269

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intellian Remote Access version 3.18

Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field.

Recommendations For Intellian Remote Access version 3.18, consider restricting access to the Ping Test field to minimize the risk of exploitation until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-17269

Affected Products

Intellian Remote Access

References · 3

• https://osv.dev/vulnerability/CVE-2019-17269 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17269 · Security Note
• https://misteralfa-hack.blogspot.com/2019/10/intellian-intellian-remote-access-rce.html · Note