Lucene search
PRIOn knowledge basePRION:CVE-2019-9189HistoryJun 05, 2019 - 6:29 p.m.
Design/Logic Flaw
2019-06-0518:29:00
PRIOn knowledge base
www.prio-n.com
3
Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed because of root code execution, not as a web server user, allowing an authenticated attacker to gain full system access.
Related
exploitpack
exploitpack
Prima Access Control 2.3.35 - Arbitrary File Upload
2019-11-12 00:00:00
FlexAir Access Control 2.4.9api3 - Remote Code Execution
2019-11-12 00:00:00
nvd
nvd
CVE-2019-9189
2019-06-05 18:29:01
cve
cve
CVE-2019-9189
2019-06-05 18:29:01
packetstorm
packetstorm
Prima Access Control 2.3.35 Script Upload Remote Code Execution
2019-11-12 00:00:00
cvelist
cvelist
CVE-2019-9189
2019-06-05 17:20:09
exploitdb
exploitdb
FlexAir Access Control 2.4.9api3 - Remote Code Execution
2019-11-12 00:00:00
Prima Access Control 2.3.35 - Arbitrary File Upload
2019-11-12 00:00:00
ics
ics
Prima Systems FlexAir
2019-07-30 12:00:00