High severity8.8NVD Advisory· Published Jul 1, 2019· Updated Jun 17, 2026
CVE-2019-7669
CVE-2019-7669
Description
Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications within the application’s web root with root privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Prima Systems/FlexAirdescription
- Range: <=2.3.38
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/155270/FlexAir-Access-Control-2.3.38-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- applied-risk.com/labs/advisoriesnvdThird Party Advisory
- www.applied-risk.com/resources/ar-2019-007nvdThird Party Advisory
- www.us-cert.gov/ics/advisories/icsa-19-211-02nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.