High severity8.8NVD Advisory· Published Dec 20, 2018· Updated Jun 17, 2026
CVE-2018-19234
CVE-2018-19234
Description
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.0
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/150427/Miss-Marple-Enterprise-Edition-File-Upload-Hardcoded-AES-Key.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2018/Nov/55nvdMailing ListThird Party Advisory
- seclists.org/bugtraq/2018/Nov/37nvdMailing ListThird Party Advisory
- www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-miss-marple-enterprise-edition/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.