CVE Feed

    Dashboard / CVE / CVE-2019-19897

    CVE-2019-19897

    In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT AUTHORITY\SYSTEM context of the target system by using the Execute Command Line function.

    Published:Jan 23, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 23, 2020
    EPSS Score:0.21791
    CVSS Score:9.8

    Affected Products

    Vendor
    Ixpdata
    Product
    Easyinstall

    Exploits

    https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-softwarehttps://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software

    Related CVEs

    CVE-2023-27791 (CVSS 8.1) — An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecur…
    CVE-2023-30132 (CVSS 7.8) — An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via stat…
    CVE-2023-30131 (CVSS 9.8) — An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated …
    CVE-2023-27795 (CVSS 7.8) — An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static …
    CVE-2023-27793 (CVSS 7.8) — An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges…
    CVE-2023-27792 (CVSS 7.8) — An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of pe…
    CVE-2022-35120 (CVSS 8.8) — IXPdata EasyInstall 6.6.14725 contains an access control issue.…
    CVE-2019-19893 (CVSS 7.5) — In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unaut…
    CVE-2019-19894 (CVSS 5.5) — In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client…
    CVE-2019-19895 (CVSS 7.8) — In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a cli…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High