PT-2019-13420

CVE-2019-13558

·

Published

2019-09-18

·

Updated

2019-10-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WebAccess versions 8.4.1 and prior
Description The issue allows for improper control of code generation, potentially enabling remote code execution, data exfiltration, or causing a system crash when an exploit is executed over the network.
Recommendations For versions 8.4.1 and prior, update to a version later than 8.4.1 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2019-13558
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com