What is CVE-2019-19165?

CVE-2019-19165 is a high-severity vulnerability in Inogard Activex, classified under Download of Code Without Integrity Check. CVSS score: 7.2/10. Published 2020-04-29.

How severe is CVE-2019-19165?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Inogard Activex

CVE-2019-19165

AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) allows ATTACKER to cause a file download to Windows user's folder and execute. This issue affects: Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) version 1.0.5.0 and later versions on windows 7/8/10.

EPSS: 0.006 (47.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Inogard Activex
Inogard Co,,ltd Ebiz4u Activex Of Co,,ltd(axecm.cab) On Windows 7/8/10 — versions 1.0.5.0 and later
Microsoft Windows_10
Microsoft Windows_7
Microsoft Windows_8

Weakness classification (CWE)

CWE-494 — Download of Code Without Integrity Check

References

vuln@krcert.or.kr (x_refsource_CONFIRM, Vendor Advisory)
vuln@krcert.or.kr (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2019-19165?: CVE-2019-19165 is a high-severity vulnerability in Inogard Activex, classified under Download of Code Without Integrity Check. CVSS score: 7.2/10. Published 2020-04-29.
How severe is CVE-2019-19165?: High severity. CVSS v3 base score is 7.2 out of 10.