Vulnerabilitycritical

Talos experts found a critical RCE in GoAhead Web Server

Security Affairsby @securityaffairsDec 4, 2019 · 06:28 UTC (Dec 4, 2019)2 min read2

Read at securityaffairs.com

Analyze CVE-2019-5096 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-5096 CVE-2019-5097 CVE-2017-17562

Tags: cve-2019-5096 cve-2019-5097 cve-2017-17562 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-17562	Unauthenticated RCE in Embedthis GoAhead Web Server via CGI LD_PRELOAD injection	8.1	97%	KEVPoC ×3	Dec 12, 2017 KEV Dec 10, 2021
CVE-2019-5096 +1 related CVE CVE-2019-5097	An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in…	9.8 group max	67%	PoC	Dec 3, 2019

From the original article

2 min read at securityaffairs.com

Experts at Cisco Talos found two vulnerabilities in the GoAhead embedded web server, including a critical remote code execution flaw. GoAhead is the world’s most popular, tiny embedded web server. It is developed by EmbedThis that defines it as compact, secure and simple to use.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.