CVE-2019-16305
CVSS V2 Medium 6.8
CVSS V3 High 8.8
Description
In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command execution is achieved, as demonstrated by the MobaXterm://`calc` URI.
Overview
- CVE ID
- CVE-2019-16305
- Assigner
- cve@mitre.org
- Vulnerability Status
- Analyzed
- Published Version
- 2019-09-14T15:15:10
- Last Modified Date
- 2020-08-24T17:37:01
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| AND | ||||
| cpe:2.3:a:mobatek:mobaxterm:11.1:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:a:mobatek:mobaxterm:12.1:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | 0 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:M/Au:N/C:P/I:P/A:P
- Access Vector
- NETWORK
- Access Compatibility
- MEDIUM
- Authentication
- NONE
- Confidentiality Impact
- PARTIAL
- Integrity Impact
- PARTIAL
- Availability Impact
- PARTIAL
- Base Score
- 6.8
- Severity
- MEDIUM
- Exploitability Score
- 8.6
- Impact Score
- 6.4
CVSS Version 3
- Version
- 3.1
- Vector String
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Attack Vector
- NETWORK
- Attack Compatibility
- LOW
- Privileges Required
- NONE
- User Interaction
- REQUIRED
- Scope
- UNCHANGED
- Confidentiality Impact
- HIGH
- Availability Impact
- HIGH
- Base Score
- 8.8
- Base Severity
- HIGH
- Exploitability Score
- 2.8
- Impact Score
- 5.9
References
| Reference URL | Reference Tags |
|---|---|
| https://freetom.github.io/0day/2019/09/14/MobaXterm-command-exec-in-protocol-handler.html | Exploit |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2019-16305 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16305 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-05-10 16:36:04 | Added to TrackCVE | |||
| 2022-12-04 02:44:50 | 2019-09-14T15:15Z | 2019-09-14T15:15:10 | CVE Published Date | updated |
| 2022-12-04 02:44:50 | 2020-08-24T17:37:01 | CVE Modified Date | updated | |
| 2022-12-04 02:44:50 | Analyzed | Vulnerability Status | updated |