CVE-2019-11364

—

CVSS 3.0

7.2 high

EPSS

2%p82

Published

Aug 29, 2019 (Aug 29, 2019)

Modified

Jun 17, 2026

Description

An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter.

Vendors: prophecyinternational
Products: snare central
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.