CVE-2019-7590

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to elevate privileges on the system. This issue affects: Exacq Technologies, Inc. exacqVision Server 9.6; 9.8. This issue does not affect: Exacq Technologies, Inc. exacqVision Server version 9.4 and prior versions; 19.03. It is not known whether this issue affects: Exacq Technologies, Inc. exacqVision Server versions prior to 8.4.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-428

Affected software

Vendor	Product	Versions
Exacq Technologies, Inc.	exacqVision Server	9.6; 9.8

References

http://www.securityfocus.com/bid/109307Third Party Advisory, VDB Entry
https://gallery.technet.microsoft.com/scriptcenter/Windows-Unquoted-Service-190f0341Patch, Third Party Advisory
https://packetstormsecurity.com/files/152128/exacqVision-9.8-Unquoted-Service-Path-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesMitigation, Vendor Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-199-01Third Party Advisory, US Government Resource
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5515.phpThird Party Advisory
http://www.securityfocus.com/bid/109307Third Party Advisory, VDB Entry
https://gallery.technet.microsoft.com/scriptcenter/Windows-Unquoted-Service-190f0341Patch, Third Party Advisory
https://packetstormsecurity.com/files/152128/exacqVision-9.8-Unquoted-Service-Path-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesMitigation, Vendor Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-199-01Third Party Advisory, US Government Resource
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5515.phpThird Party Advisory

Timeline

Published: Jul 19, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-75939.1Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving CVE-2019-75949.1Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving th CVE-2019-76086.1Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive info CVE-2019-760910.0Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the CVE-2019-76109.0Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpa CVE-2019-76118.1A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are dis CVE-2019-76129.8A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is s CVE-2019-76137.5Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry CVE-2019-76145.9A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with CVE-2019-76157.4A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certifi CVE-2019-76164.9Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer CVE-2019-76177.2When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker