CVSS v3
8.8
HIGH
EPSS Score
22.2%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed because of root code execution, not as a web server user, allowing an authenticated attacker to gain full system access.
Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed because of root code execution, not as a web server user, allowing an authenticated attacker to gain full system access.
Active exploitation of CVE-2019-9189 has not been confirmed. The EPSS score is 22.2%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2019-9189 has a CVSS v3 base score of 8.8 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).