CVE-2019-19893
Last modified
CVE-2019-19893 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT AUTHORITY\SYSTEM.. EPSS estimates a 2.55% chance of exploitation in the next 30 days.
Description
In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT AUTHORITY\SYSTEM.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ixpdata | Easyinstall | 6.2.13723 |
References
- https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-softwareExploit, Third Party Advisory
- https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-softwareExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-19893?
How severe is CVE-2019-19893?
How do I fix CVE-2019-19893?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-19887bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a N…6.5
- CVE-2019-19888jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a div…6.5
- CVE-2019-19889An issue was discovered on Humax Wireless Voice Gateway HGB1…7.5
- CVE-2019-1989In ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c, th…
- CVE-2019-19890An issue was discovered on Humax Wireless Voice Gateway HGB1…7.5
- CVE-2019-19891An encryption key vulnerability on Mitel SIP-DECT wireless d…5.9
- CVE-2019-19894In IXP EasyInstall 6.2.13723, it is possible to temporarily …5.5
- CVE-2019-19895In IXP EasyInstall 6.2.13723, there is Lateral Movement (usi…7.8
- CVE-2019-19896In IXP EasyInstall 6.2.13723, there is Remote Code Execution…9.9
- CVE-2019-19897In IXP EasyInstall 6.2.13723, there is Remote Code Execution…9.8
- CVE-2019-19898In IXP EasyInstall 6.2.13723, there are cleartext credential…7.5
- CVE-2019-19899Pebble Templates 3.1.2 allows attackers to bypass a protecti…9.8
Are you affected by CVE-2019-19893?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST