PT-2020-9782 · Netsas · Netsas Enigma Nms

Published 2020-03-19 · Updated 2020-03-23 · CVE-2019-16066

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETSAS Enigma NMS versions 65.0.0 and prior

Description An unrestricted file upload vulnerability exists in user and system file upload functions. This allows an attacker to upload malicious files and perform arbitrary code execution on the system.

Recommendations For NETSAS Enigma NMS versions 65.0.0 and prior, consider restricting access to the file upload functions as a temporary workaround until a patch is available. Restricting the types of files that can be uploaded can also help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-16066

Affected Products

Netsas Enigma Nms

References · 4

• 🔥 https://mogozobo.com/?p=3647 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-16066 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16066 · Vendor Advisory
• https://t.me/cvenotify/1903 · Telegram Post