CVE-2019-25065

moderate-risk
Published 2022-06-09

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Do I need to act?

!
73.7% chance of exploitation in next 30 days
EPSS score — higher than 26% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Opennetadmin

References (4)

Exploit https://0day.today/exploit/33544
Exploit https://vuldb.com/?id.146798
Exploit https://0day.today/exploit/33544
Exploit https://vuldb.com/?id.146798
47
/ 100
moderate-risk
Severity 23/34 · High
Exploitability 19/34 · Moderate
Exposure 5/34 · Minimal