CVE-2019-19895 | BDVDB-2026-129613 Detail

Description#

In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_CODE]\EveryLogon.bat, achieve this movement and execute code in the context of other users.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-01-23Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.