VULNERABILITY INTELLIGENCE

CVE-2019-13550

CVSS score9.8 CRITICAL
EPSS probability2.85%
CISA KEVNot currently listed
Published2019-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-285
  • nvd@nist.gov: NVD-CWE-Other

Primary references