CVE-2019-12310

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-06-03 · updated 2026-06-17
Weakness: CWE-22

Description

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including Base64 encoded 'support' credentials, leading to administrative access of the device.

Affected products

Exagrid Backup Appliance Firmware: 48.1.1044.p50

References

https://exagrid.com/exagrid-products/resources/
https://www.inquisitllc.com/exagrid-directory-traversal-vulnerability-to-support-credential-extraction/
https://exagrid.com/exagrid-products/resources/
https://www.inquisitllc.com/exagrid-directory-traversal-vulnerability-to-support-credential-extraction/

Get alerted when CVE-2019-12310 or the next vulnerability affects your stack