What’s Vulnerable › Vulnerabilities

CVE-2019-10060

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-26 · updated 2026-06-17
• Weakness: CWE-119

Description

The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability.

Affected products

• Verifone Verix Multi-App Conductor: 2.7

References

• https://github.com/VerSprite/research/blob/master/advisories/VS-2019-002.md
• https://github.com/VerSprite/research/blob/master/advisories/VS-2019-002.md

Get alerted when CVE-2019-10060 or the next vulnerability affects your stack