CVE-2019-19161

HIGH 7.2CVE-2019-19161 · Published 30/06/2020 · updated 17/06/2026

In short

CVE-2019-19161 is a HIGH (CVSS 7.2) vulnerability affecting cymiinstaller322 activex (cymiinstaller322 activex project).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cymiinstaller322 activex cymiinstaller322_activex_project	`≤ 2016.5.26.1`	No fix yet

Description

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification.

References

boho.or.kr/krcert/secNoticeView.do · Third Party Advisory
tobesoft.com/Index.do · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free