CVE-2019-5619

AASync.com AASync Stack-based Buffer Overflow

EPSS 4.7%CWE-121

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 4.7%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

12 Oct 2010Metasploit module available

29 Apr 2020Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

AASync.com AASync version 2.2.1.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow.

Affected products

Want to know if your infrastructure is exposed to this?

References