AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-19460

MEDIUM · CVSS 5.5 EPSS 0.42% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
External Security References
packetstormsecurity.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-19460
Severity
MEDIUM
CVSS
5.5
EPSS
0.42%
Windows

Original NVD Description

An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.