What’s Vulnerable › Vulnerabilities

CVE-2019-13658

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-02 · updated 2026-06-17
• Weakness: CWE-798

Description

CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security.

Affected products

• CA Technologies, a Broadcom Company CA Network Flow Analysis: from 9.3.1 through 9.5.0; 10.0.0

References

• http://packetstormsecurity.com/files/154739/CA-Network-Flow-Analysis-9.x-10.0.x-Remote-Command-Execution.html
• http://seclists.org/fulldisclosure/2019/Oct/6
• https://seclists.org/bugtraq/2019/Oct/4
• https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/new-security-notice-ca-20190930-01-security-notice-for-ca-network-flow-analysis.html
• http://packetstormsecurity.com/files/154739/CA-Network-Flow-Analysis-9.x-10.0.x-Remote-Command-Execution.html
• http://seclists.org/fulldisclosure/2019/Oct/6
• https://seclists.org/bugtraq/2019/Oct/4
• https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/new-security-notice-ca-20190930-01-security-notice-for-ca-network-flow-analysis.html

Get alerted when CVE-2019-13658 or the next vulnerability affects your stack