CVE-2019-19167

Name of the Vulnerable Software and Affected Versions Tobesoft Nexacro versions 2019.9.25.1 and earlier

Description The issue allows for arbitrary code execution by utilizing a method supported by the Nexacro14 ActiveX Control, enabling an attacker to cause remote code execution.

Recommendations For Tobesoft Nexacro versions 2019.9.25.1 and earlier, consider disabling the Nexacro14 ActiveX Control as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.