CVE-2018-19234

—

CVSS 3.0

8.8 high

EPSS

3%p88

Published

Dec 20, 2018 (Dec 20, 2018)

Modified

Jun 17, 2026

Description

The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.

Vendors: comparex
Products: miss marple
Weakness: CWE-494
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news0 stories

No ingested article mentions this CVE yet.