High severity7.2NVD Advisory· Published Jul 1, 2019· Updated Jun 17, 2026
CVE-2019-7670
CVE-2019-7670
Description
Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow attackers to execute commands directly on the operating system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:primasystems:flexair:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:primasystems:flexair:*:*:*:*:*:*:*:*range: <=2.3.38
- (no CPE)range: <=2.3.38
- Prima Systems/FlexAirdescription
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/155271/FlexAir-Access-Control-2.3.38-Remote-Root.htmlnvdExploitThird Party AdvisoryVDB Entry
- applied-risk.com/labs/advisoriesnvdThird Party Advisory
- www.applied-risk.com/resources/ar-2019-007nvdThird Party Advisory
- www.us-cert.gov/ics/advisories/icsa-19-211-02nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.