CVE-2019-13028

HIGH 8.8CVE-2019-13028 · Published 28/06/2019 · updated 17/06/2026

In short

CVE-2019-13028 is a HIGH (CVSS 8.8) vulnerability affecting electronic identification cards client (minv).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.7% of all vulnerabilities.
Fix: update to 3.0.3, 3.1.2 or later.

Package	Affected versions	Patched versions
electronic identification cards client minv	`< 3.0.3< 3.1.2`	`3.0.33.1.2`

Description

An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.3) allows remote attackers to execute arbitrary code (.cgi, .pl, or .php) or delete arbitrary files via a crafted HTML page. This is a product from the Ministry of Interior of the Slovak Republic.

References

csirt.gov.sk/aktualne-7d7.html · Exploit
csirt.gov.sk/doc/eid_klient_tlacova_sprava.pdf · Third Party Advisory
minv.sk · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free