CVE-2019-14480

9.8 criticalEPSS 1.1%

Critical (9.8) in adremsoft netcrunch. EPSS 1.1% chance of exploitation in the next 30 days.

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-311, CWE-338, CWE-522, CWE-732
Published: 2020-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adremsoft:netcrunch

References

https://compass-security.com/fileadmin/Research/Advisories/2020-14_CSNC-2019-015_AdRem_NetCrunch_Improper_Session_Handling.txt
https://www.adremsoft.com/support/
https://compass-security.com/fileadmin/Research/Advisories/2020-14_CSNC-2019-015_AdRem_NetCrunch_Improper_Session_Handling.txt
https://www.adremsoft.com/support/

Check your stack JSON