Vulnerability Details CVE-2019-9163
The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2019-9163
-
cpe:2.3:a:marchnetworks:command_client:-
-
cpe:2.3:a:marchnetworks:command_client:2.6.4
-
cpe:2.3:a:marchnetworks:command_client:2.6.4.1