CVE-2018-19234

The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code…

mitre·CWE-494·Published 2018-12-20

CVSS

—

EPSS

0.03

KEV

Exploits

cve.orgen

208 chars

The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.

NVDen

208 chars

NVDes

276 chars

El servicio de actualización Miss Marple en COMPAREX Miss Marple Enterprise Edition, en versiones anteriores a la 2.0, permite que atacantes remotos ejecuten código arbitrario con privilegios SYSTEM mediante vectores relacionados con la falta de validación de actualizaciones.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	9.0	8.0	10.0	AV:N/AC:L/Au:S/C:C/I:C/A:C
3.0	Primary	NVD	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H