Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Saltosystem Subscribe
Filtered by product Proaccess Space
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-19459 1 Saltosystem 1 Proaccess Space 2021-07-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE-2019-19458 files under the web root, or .bat files that will be used with auto start. This allows an attacker to execute arbitrary commands on the server.
CVE-2019-19460 2 Microsoft, Saltosystem 2 Windows, Proaccess Space 2019-12-13 6.6 MEDIUM 5.5 MEDIUM
An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.
CVE-2019-19458 1 Saltosystem 1 Proaccess Space 2019-12-10 5.0 MEDIUM 8.6 HIGH
SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.
CVE-2019-19457 1 Saltosystem 1 Proaccess Space 2019-12-10 3.5 LOW 5.4 MEDIUM
SALTO ProAccess SPACE 5.4.3.0 allows XSS.