CVE-2019-7669

Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications within the application’s web root with root privileges.

• CWE-434

• http://packetstormsecurity.com/files/155270/FlexAir-Access-Control-2.3.38-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://applied-risk.com/labs/advisoriesThird Party Advisory
• https://www.applied-risk.com/resources/ar-2019-007Third Party Advisory
• https://www.us-cert.gov/ics/advisories/icsa-19-211-02Third Party Advisory, US Government Resource
• http://packetstormsecurity.com/files/155270/FlexAir-Access-Control-2.3.38-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://applied-risk.com/labs/advisoriesThird Party Advisory
• https://www.applied-risk.com/resources/ar-2019-007Third Party Advisory
• https://www.us-cert.gov/ics/advisories/icsa-19-211-02Third Party Advisory, US Government Resource

Published

Jul 1, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7663An Invalid Address dereference was discovered in TIFFWriteDi…
• CVE-2019-7664In elfutils 0.175, a negative-sized memcpy is attempted in e…5.5
• CVE-2019-7665In elfutils 0.175, a heap-based buffer over-read was discove…5.5
• CVE-2019-7666Prima Systems FlexAir, Versions 2.3.38 and prior. The applic…8.8
• CVE-2019-7667Prima Systems FlexAir, Versions 2.3.38 and prior. The applic…9.8
• CVE-2019-7668Prima Systems FlexAir devices have Default Credentials.
• CVE-2019-7670Prima Systems FlexAir, Versions 2.3.38 and prior. The applic…7.2
• CVE-2019-7671Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters…9
• CVE-2019-7672Prima Systems FlexAir, Versions 2.3.38 and prior. The flash …8.8
• CVE-2019-7673An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.…
• CVE-2019-7674An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.…
• CVE-2019-7675An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.…