CVE-2019-11031

CRITICAL · CVSS 9.8 EPSS 1.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-08-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-11031

Severity

CRITICAL

CVSS

9.8

EPSS

1.86%

Original NVD Description

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a Setup-Files action, and then execute these files with SYSTEM privileges.