CVE-2018-19233

HIGH 7.8CVE-2018-19233 · Published 20/12/2018 · updated 17/06/2026

In short

CVE-2018-19233 is a HIGH (CVSS 7.8) vulnerability affecting miss marple (comparex).
Chance of exploitation in the next 30 days (EPSS): 0.59%, higher than 48.5% of all vulnerabilities.
Fix: update to 2.0 or later.

Package	Affected versions	Patched versions
miss marple comparex	`< 2.0`	`2.0`

Description

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file.

References

packetstormsecurity.com/files/150427/Miss-Marple-Enterprise-Edition-File-Upload-Hardcoded-AES-Key.html · Third Party Advisory
seclists.org/fulldisclosure/2018/Nov/55 · Mailing List
seclists.org/bugtraq/2018/Nov/37 · Mailing List
sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-miss-marple-enterprise-edition · Third Party Advisory

More vulnerabilities in miss marple

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free