CVE-2019-13475: High severity mobaxterm vulnerability

Published Jul 9, 2019

Updated

In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on the available command-line arguments of the software, one can simply inject -exec to execute arbitrary commands. The additional arguments -hideterm and -exitwhendone in the payload make the attack less visible.

Affected Software

1 affected component

Mobatek MobaXterm=11.1

Event History

Jul 9, 2019

CVE Published

via MITRE·09:58 PM

Data Sourced

via MITRE·09:58 PM

Description

Frequently Asked Questions

What is the vulnerability ID for the MobaXterm vulnerability?

The vulnerability ID for the MobaXterm vulnerability is CVE-2019-13475.

What is the severity of CVE-2019-13475?

The severity of CVE-2019-13475 is high.

What is the affected software for CVE-2019-13475?

The affected software for CVE-2019-13475 is MobaXterm version 11.1.

What is the description of CVE-2019-13475?

CVE-2019-13475 is an argument injection vulnerability in the mobaxterm: URI handler of MobaXterm 11.1 that allows remote attackers to execute arbitrary commands through a specially crafted URL.

Is there a fix for CVE-2019-13475?

At the time of this report, there is no known fix for CVE-2019-13475. It is recommended to update to the latest version of MobaXterm or consider alternative software solutions.