CVE-2019-16755

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-09-26 · updated 2026-06-17
Weakness: CWE-502

Description

BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all versions, service packs, and patches are affected by this vulnerability. Affected SmartIT versions: 1.x, 2.0, 18.05, 18.08, and 19.02, all versions, service packs, and patches are affected by this vulnerability.

Affected products

BMC Myit Digital Workplace: before 18.08.00 — fixed in 18.08.00

How to fix

Upgrade to a fixed version: BMC Myit Digital Workplace 18.08.00. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-16755 or the next vulnerability affects your stack