CVE-2019-20504

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0640%

EPSS Percentile36.01th

Published2020年3月9日

Last Modified2024年11月21日

Vulnerability Description

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.

Affected Platforms (CPE)

📦

Quest

Kace Systems Management

< 6.4.120822

References & Advisories

🔗 https://www.rcesecurity.com/2019/04/dell-kace-k1000-remote-code-execution-the-story-of-bug-k1-18652/

Vulnerability Description

Affected Platforms (CPE)

Kace Systems Management

References & Advisories

相關漏洞威脅