CVE-2019-19585

🗓️ 06 Jan 2020 19:24:04Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 163 Views🌐 WEB

An issue discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions

Reporter	Title	Published	Views	Family All 21
0day.today	Rconfig 3.x Chained Remote Code Execution Exploit	17 Mar 202000:00	–	zdt
0day.today	rConfig 3.9.4 - (searchField) Unauthenticated Root Remote Code Execution Exploit	28 Mar 202000:00	–	zdt
GithubExploit	Exploit for OS Command Injection in Rconfig	2 Dec 201916:32	–	githubexploit
ATTACKERKB	CVE-2019-19585	8 Aug 201900:00	–	attackerkb
ATTACKERKB	CVE-2020-10220	7 Mar 202000:00	–	attackerkb
BDU FSTEC	The vulnerability in the /etc/sudoers component of the rConfig utility, which manages network device configurations, allows a hacker to circumvent existing security restrictions.	11 Feb 202000:00	–	bdu_fstec
Circl	CVE-2019-19585	19 Mar 202417:41	–	circl
CNVD	Unspecified vulnerability in rConfig	7 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-19585	6 Jan 202019:24	–	cvelist
Exploit DB	rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution	27 Mar 202000:00	–	exploitdb

NVD

Node

rconfig rconfigMatch3.9.3

Source	Link
github	www.github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_lpe.sh
packetstormsecurity	www.packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html
raw	www.raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_lpe.sh

Parameter	Position	Path	Description	CWE
path	query param	lib/ajaxHandlers/ajaxArchiveFiles.php	Command injection via the path parameter in the ajaxArchiveFiles.php archive handler used to execute arbitrary commands after authentication/privilege escalation.	CWE-269

17 Jun 2026 02:26Current

8.3High risk

Vulners AI Score8.3

CVSS 24.6

CVSS 3.17.8

EPSS0.05668

CWE-269