CVE-2019-19606

CRITICAL 9.8CVE-2019-19606 · Published 30/03/2020 · updated 17/06/2026

In short

CVE-2019-19606 is a CRITICAL (CVSS 9.8) vulnerability affecting x-plane (x-plane).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 83.9% of all vulnerabilities.
Fix: update to 11.41 or later.

Package	Affected versions	Patched versions
x-plane x-plane	`< 11.41`	`11.41`

Description

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths (or a leak of OS credentials to a remote system) via crafted network packets. This could be used to execute arbitrary commands on the system.

References

blog.0xlabs.com/2020/03/x-plane-1141-remote-command-execution.html · Exploit

More vulnerabilities in x-plane

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free