CVE-2018-19234

ALTO 8.8CVE-2018-19234 · Published 20/12/2018 · updated 17/06/2026

En resumen

CVE-2018-19234 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a miss marple (comparex).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.3%, mayor que el 88.6% de las vulnerabilidades.
Solución: actualizar a 2.0 o posterior.

Package	Affected versions	Patched versions
miss marple comparex	`< 2.0`	`2.0`

Description

The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.

References

packetstormsecurity.com/files/150427/Miss-Marple-Enterprise-Edition-File-Upload-Hardcoded-AES-Key.html · Third Party Advisory
seclists.org/fulldisclosure/2018/Nov/55 · Mailing List
seclists.org/bugtraq/2018/Nov/37 · Mailing List
sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-miss-marple-enterprise-edition · Third Party Advisory

Más vulnerabilidades de miss marple

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free