CVE-2019-19893

In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's…

High · published January 23, 2020

CVSS v3.0
7.5
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT AUTHORITY\SYSTEM.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.02546 · 84.9th percentile
Published
2020-01-23T20:55Z
EPSS history
Timeline
  • 23 JAN 20:55Z
    In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's…
    cvelistv5