CVE Vulnerability

CVE-2019-19897

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT AUTHORITYSYSTEM context of the target system by using the Execute Command Line function.

10 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:ixpdata:easyinstall:6.2.13723:*:*:*:*:*:*:*
Information

Published : 2020-01-23 09:15

Updated : 2020-01-31 03:46

NVD link : CVE-2019-19897

Mitre link : CVE-2019-19897

Products Affected
No products.
CWE
CWE-78