CVE-2019-19163

low-risk

Published 2020-06-30

A Vulnerability in the firmware of COMMAX WallPad(CDP-1020MB) allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL.

Do I need to act?

0.14% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

ADJACENT_NETWORK / HIGH complexity

Affected Products (1)

Cdp-1020Mb Firmware

Affected Vendors

Commax

References (4)

Third Party Advisory https://www.commax.com/index.php?cate1=10&cate2=21&cate3=23&nnum=2016

Third Party Advisory https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35477

Third Party Advisory https://www.commax.com/index.php?cate1=10&cate2=21&cate3=23&nnum=2016

Third Party Advisory https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35477

/ 100

low-risk

Severity 20/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal