CVE-2019-18909

Description

The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with root privileges.

Risk Information

Base Score

8.0

MODERATE

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.178

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-16287 ,CVE-2019-18909 ,CVE-2019-18910 are affected in thinpro 7.1	NCM
Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability (CVE-2019-18909)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234