PT-2022-8287 · Unknown · Opennetadmin

Matt Pascoe · Published 2022-06-09 · Updated 2022-06-15 · CVE-2019-25065

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenNetAdmin version 18.1.1

Description A critical issue has been discovered that allows for privilege escalation through some unknown functionality. This can be exploited remotely. The exploit has been publicly disclosed.

Recommendations For OpenNetAdmin version 18.1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-25065

Affected Products

Opennetadmin

References · 4

• 🔥 https://0day.today/exploit/33544 · Exploit
• 🔥 https://vuldb.com/?id.146798 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25065 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25065 · Vendor Advisory