CVE-2019-18249

Reliable Controls MACH-ProWebCom/Sys, all versions prior to 2.15 (Firmware versions prior to 8.26.4), may allow attacker to execute commands on behalf of the user when an authenticated user clicks on a malicious link.

Score

CVSS 3.1 6.1 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-12-24

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Mach-prowebcom Firmware (Reliablecontrols)
• Mach-prowebsys Firmware (Reliablecontrols)

References

• https://www.us-cert.gov/ics/advisories/icsa-19-353-04