PT-2019-3536 · Zingbox · Zingbox Inspector

Published 2019-10-01 · Updated 2023-02-15 · CVE-2019-1584

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zingbox Inspector versions 1.293 and earlier

Description A security issue exists that allows for remote code execution if the Inspector receives a malicious command from the Zingbox cloud or is tampered with to connect to an attacker's cloud endpoint. The vulnerability is also described as a result of insufficient input validation, which could allow a remote attacker to implement a "man-in-the-middle" attack.

Recommendations For Zingbox Inspector versions 1.293 and earlier, update to a version later than 1.293 to resolve the issue. As a temporary workaround, consider restricting access to the Zingbox cloud endpoint to minimize the risk of exploitation. Additionally, ensure that the Zingbox Inspector is not tampered with to connect to unauthorized cloud endpoints.

Fix

Command Injection

RCE

Weakness Enumeration

CWE-77

CWE-20

Related Identifiers

BDU:2019-03713

CVE-2019-1584

Affected Products

Zingbox Inspector

References · 6

• https://bdu.fstec.ru/vul/2019-03713 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1584 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1584 · Security Note
• https://securityadvisories.paloaltonetworks.com/Home/Detail/164 · Note
• https://t.me/cvenotify/44327 · Telegram Post
• https://security.paloaltonetworks.com/CVE-2019-1584 · Note