CVE-2019-20451 File upload in n/a
Remote attackers can execute arbitrary code by uploading a malicious shortcut file and triggering a reboot or VNC restart via the HTTP API.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-20451?
CVE-2019-20451 is a critical vulnerability in n/a, published on 10 Feb 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploading RebootSystem.lnk and requesting /REBOOTSYSTEM or /RESTARTVNC. (Authentication is required but an XML file containing credentials can be downloaded.)
Weakness: CWE-434
Which versions are affected by CVE-2019-20451?
It affects 2 products.
Products include Samsung Prismview Player 11, Samsung Prismview System 9.
How do I fix CVE-2019-20451?
No fix has been published for CVE-2019-20451 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-20451 being exploited?
There is no known exploitation of CVE-2019-20451 in the wild and no public exploit code.
Sources
Also known as GHSA-7q5x-7vh4-2297.