CVE-2019-18909

The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with…

published November 22, 2019

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with root privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02181 · 82.2th percentile
Published
2019-11-22T21:38Z
EPSS history
Timeline
  • 22 NOV 21:38Z
    The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with…
    cvelistv5