CVE-2019-3999

Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute…

published February 25, 2020

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08566 · 95.1th percentile
Published
2020-02-25T18:15Z
EPSS history
Timeline
  • 25 FEB 18:15Z
    Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute…
    cvelistv5