CVE-2019-10973

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveraging functions of the troubleshooting tools located in the administrator user interface.

Metrics

CVSS 3.0 7.2/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	Quest KACE	All versions prior to version 8.0.x, 8.1.x, and 9.0.x

References

http://www.securityfocus.com/bid/109001Third Party Advisory, VDB Entry
https://www.us-cert.gov/ics/advisories/icsa-19-183-02Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/109001Third Party Advisory, VDB Entry
https://www.us-cert.gov/ics/advisories/icsa-19-183-02Patch, Third Party Advisory, US Government Resource

Timeline

Published: Jul 8, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-109745.5NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten wi CVE-2019-109756.6An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which may crash the system CVE-2019-109765.5Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sa CVE-2019-109777.5In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets CVE-2019-109787.8Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited wh CVE-2019-109799.8SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.CVE-2019-10986.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows CVE-2019-109807.8A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. This may allow an att CVE-2019-109817.8In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user CVE-2019-109827.8Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by CVE-2019-109837.5In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied d CVE-2019-109847.8Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited wh