Unscored CVE-2019-7669 EUVD-2019-17201GHSA-xjxr-9f3w-9hc2

Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenti…

Published Jul 1, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications within the application’s web root with root privileges.

Advisories 1

ICSA-19-211-02 Prima Systems FlexAir CISA ICS & IT advisories · Jul 30, 2019

References

https://applied-risk.com/labs/advisories
https://www.applied-risk.com/resources/ar-2019-007
https://www.us-cert.gov/ics/advisories/icsa-19-211-02
http://packetstormsecurity.com/files/155270/FlexAir-Access-Control-2.3.38-Command-Injection.html