CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2019-7670
High (7.2) in primasystems flexair. EPSS 18% chance of exploitation in the next 30 days.
Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow attackers to execute commands directly on the operating system.
Severity
- EPSS
- 18% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- primasystems:flexair
References
- http://packetstormsecurity.com/files/155271/FlexAir-Access-Control-2.3.38-Remote-Root.html
- https://applied-risk.com/labs/advisories
- https://www.us-cert.gov/ics/advisories/icsa-19-211-02
- https://www.applied-risk.com/resources/ar-2019-007
- http://packetstormsecurity.com/files/155271/FlexAir-Access-Control-2.3.38-Remote-Root.html