What’s Vulnerable › Vulnerabilities

CVE-2019-19165

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-29 · updated 2026-06-17
• Weakness: CWE-494

Description

AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) allows ATTACKER to cause a file download to Windows user's folder and execute. This issue affects: Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) version 1.0.5.0 and later versions on windows 7/8/10.

Affected products

• Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8/10: before 1.0.5.0 — fixed in 1.0.5.0

How to fix

Upgrade to a fixed version: Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8/10 1.0.5.0. Check the vendor advisory for mitigations.

References

• http://www.ebiz4u.co.kr/home.do
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35348
• http://www.ebiz4u.co.kr/home.do
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35348

Get alerted when CVE-2019-19165 or the next vulnerability affects your stack