CVE-2019-19897

9.8 criticalEPSS 5.6%

Critical (9.8) in ixpdata easyinstall. EPSS 5.6% chance of exploitation in the next 30 days.

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT AUTHORITY\SYSTEM context of the target system by using the Execute Command Line function.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ixpdata:easyinstall

References

https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software

Check your stack JSON