Unrated severityNVD Advisory· Published Mar 9, 2020· Updated Aug 5, 2024

CVE-2019-20504

Description

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Quest KACE/K1000 Systems Management Appliancedescription
Quest/Kace Systems Management Appliancellm-fuzzy
Range: <6.4.120822

Patches

Vulnerability mechanics

References

www.rcesecurity.com/2019/04/dell-kace-k1000-remote-code-execution-the-story-of-bug-k1-18652/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000