High severity8.1NVD Advisory· Published Nov 14, 2019· Updated Jun 17, 2026

CVE-2019-16110

Description

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream.

Affected products

Blade Group/Shadow
cpe:2.3:a:blade-group:shadow:*:*:*:*:*:*:*:*
Range: <=2.13.3
Blade/Shadowdescription
Blade/Shadowllm-create
Range: <=2.13.3

Patches

Vulnerability mechanics

References

sigint.shnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000