CVE-2019-16328

EPSS 13.0%

Vexday Risk Score

23Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 13.0%KEV nãoPoC —Nuclei —Metasploit simPatch referenciado

Ciclo de vida

03 oct 2019Publicada en NVD

19 feb 2023Exploit Metasploit disponible

Velocidad de armamento

1234 díashasta el módulo Metasploit

Recomendación: Planificar corrección próxima — ya existe PoC pública.

In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings.

Productos afectados

n/a · n/a

Referencias

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00046.html http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00004.html https://github.com/tomerfiliba/rpyc https://rpyc.readthedocs.io/en/latest/docs/security.html