VYPR

LogMX

by LightySoft

CVEs (1)

  • CVE-2019-7323HigFeb 4, 2019
    risk 0.49cvss 7.5epss 0.01

    GUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. The update process relies on cleartext HTTP. The attacker could…