CVE-2019-1584

A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code execution if the Inspector were sent a malicious command from the Zingbox cloud, or if the Zingbox Inspector were tampered with to connect to an attacker's cloud endpoint.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@paloaltonetworks.com

Published

2019-10-09

Last modified

2024-08-04

Weaknesses

CWE-77

Affected products

• Inspector (Zingbox)

References

• https://security.paloaltonetworks.com/CVE-2019-1584