CVE-2019-3702

Name: CVE-2019-3702
Creator: NVD / NIST
Published: 2019-05-13T17:29:03.067+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 5.30%

Last modified Jun 17, 2026

CVE-2019-3702 is a vulnerability of currently unknown severity. A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request.. EPSS estimates a 5.30% chance of exploitation in the next 30 days.

Description

A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request.

Metrics

EPSS Probability

5.30%

91.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-78

Affected Software

Vendor	Product	Versions
Lifesize	Icon 300 Firmware	ls_rm3_3.7.0\(2421\)
Lifesize	Icon 500 Firmware	ls_rm3_3.7.0\(2421\)
Lifesize	Icon 700 Firmware	ls_rm3_3.7.0\(2421\)

References

https://atomic111.github.io/article/lifesize-icon-remote-code-executionExploit, Third Party Advisory
https://www.lifesize.com/en/video-conferencing-camerasProduct, Vendor Advisory
https://www.sva.de/solutions/it-security.htmlNot Applicable
https://atomic111.github.io/article/lifesize-icon-remote-code-executionExploit, Third Party Advisory
https://www.lifesize.com/en/video-conferencing-camerasProduct, Vendor Advisory
https://www.sva.de/solutions/it-security.htmlNot Applicable

Timeline

Published: May 13, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-3702?

How severe is CVE-2019-3702?

Severity scoring for CVE-2019-3702 is pending analysis. The EPSS model estimates a 5.30% probability of exploitation in the next 30 days.

How do I fix CVE-2019-3702?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-3702?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST