9
CVE-2018-19234
- EPSS 5.41%
- Veröffentlicht 20.12.2018 17:29:01
- Zuletzt bearbeitet 21.11.2024 03:57:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Comparex ≫ Miss Marple SwEditionenterprise Version < 2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.41% | 0.899 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 9 | 8 | 10 |
AV:N/AC:L/Au:S/C:C/I:C/A:C
|
CWE-494 Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.