What is CVE-2019-9859?

CVE-2019-9859 is a high-severity vulnerability in Vestacp Vesta_control_panel, classified under OS Command Injection. CVSS score: 8.8/10. Published 2020-03-10.

How severe is CVE-2019-9859?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in Vestacp Vesta_control_panel

CVE-2019-9859

Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to ex…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.030 (85.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Vestacp Vesta_control_panel
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-9859?: CVE-2019-9859 is a high-severity vulnerability in Vestacp Vesta_control_panel, classified under OS Command Injection. CVSS score: 8.8/10. Published 2020-03-10.
How severe is CVE-2019-9859?: High severity. CVSS v3 base score is 8.8 out of 10.