Lucene search
+L

CVE-2019-1337

🗓️ 10 Oct 2019 13:28:41Reported by microsoftType 
cve
 cve
🔗 web.nvd.nist.gov👁 149 Views🌐 WEB

Windows Update Client fails to handle objects in memory, Information Disclosure Vulnerabilit

Related
Detection
Affected
Refs
Paths
[
  {
    "product": "Windows",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "10 Version 1809 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for ARM64-based Systems"
      }
    ]
  },
  {
    "product": "Windows Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2019"
      },
      {
        "status": "affected",
        "version": "2019  (Core installation)"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows Server, version 1903 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
mode_namerequest bodycgi-bin-igd/netcore_set.cgiPOST to netcore_set.cgi with crafted form data to trigger remote command executionCWE-200
tools_typerequest bodycgi-bin-igd/netcore_set.cgiPOST to netcore_set.cgi with crafted form data to trigger remote command executionCWE-200
tools_ip_urlrequest bodycgi-bin-igd/netcore_set.cgiPOST to netcore_set.cgi with crafted form data to trigger remote command executionCWE-200
tools_cmdrequest bodycgi-bin-igd/netcore_set.cgiPOST to netcore_set.cgi with crafted form data to trigger remote command executionCWE-200
net_tools_setrequest bodycgi-bin-igd/netcore_set.cgiPOST to netcore_set.cgi with crafted form data to trigger remote command executionCWE-200
wlan_idx_numrequest bodycgi-bin-igd/netcore_set.cgiPOST to netcore_set.cgi with crafted form data to trigger remote command executionCWE-200
mode_namerequest bodycgi-bin-igd/netcore_get.cgiPOST to netcore_get.cgi to retrieve command output after exploitationCWE-200
norequest bodycgi-bin-igd/netcore_get.cgiPOST to netcore_get.cgi to retrieve command output after exploitationCWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 02:28Current
6.5Medium risk
Vulners AI Score6.5
CVSS 22.1
CVSS 3.15.5
EPSS0.02199
149