CVE-2019-9163

—

CVSS 3.1

9.8 critical

EPSS

2%p82

Published

Apr 1, 2020 (Apr 1, 2020)

Modified

Jun 17, 2026

Description

The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects.

Vendors: marchnetworks
Products: command client
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.