Unrated severityNVD Advisory· Published Aug 22, 2019· Updated Aug 4, 2024
CVE-2019-11031
CVE-2019-11031
Description
Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a Setup-Files action, and then execute these files with SYSTEM privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Mirasys/Mirasys VMSdescription
- Range: before V7.6.1 and 8.x before V8.3.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.