Lucene search
K

CVE-2019-1337

🗓️ 10 Oct 2019 13:28:41Reported by microsoftType 
cve
 cve
🔗 web.nvd.nist.gov👁 132 Views🌐 WEB

Windows Update Client fails to handle objects in memory, Information Disclosure Vulnerabilit

Related
Detection
Affected
Refs
Paths
[
  {
    "product": "Windows",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "10 Version 1809 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for ARM64-based Systems"
      }
    ]
  },
  {
    "product": "Windows Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2019"
      },
      {
        "status": "affected",
        "version": "2019  (Core installation)"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows Server, version 1903 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
mode_namerequest body/cgi-bin-igd/netcore_set.cgiNetis WF2419 Netcore_set CGI vulnerability used for remote code execution via crafted POST dataCWE-200
tools_typerequest body/cgi-bin-igd/netcore_set.cgiNetis WF2419 Netcore_set CGI vulnerability used for remote code execution via crafted POST dataCWE-200
tools_ip_urlrequest body/cgi-bin-igd/netcore_set.cgiNetis WF2419 Netcore_set CGI vulnerability used for remote code execution via crafted POST dataCWE-200
tools_cmdrequest body/cgi-bin-igd/netcore_set.cgiNetis WF2419 Netcore_set CGI vulnerability used for remote code execution via crafted POST dataCWE-200
net_tools_setrequest body/cgi-bin-igd/netcore_set.cgiNetis WF2419 Netcore_set CGI vulnerability used for remote code execution via crafted POST dataCWE-200
wlan_idx_numrequest body/cgi-bin-igd/netcore_set.cgiNetis WF2419 Netcore_set CGI vulnerability used for remote code execution via crafted POST dataCWE-200
mode_namerequest body/cgi-bin-igd/netcore_get.cgiNetis WF2419 Netcore_get CGI vulnerability used to retrieve command output after exploitationCWE-200
norequest body/cgi-bin-igd/netcore_get.cgiNetis WF2419 Netcore_get CGI vulnerability used to retrieve command output after exploitationCWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 02:28Current
6.5Medium risk
Vulners AI Score6.5
CVSS 22.1
CVSS 3.15.5
EPSS0.02052
132