CVE-2019-16305: Command Injection

Published Sep 14, 2019

Updated

In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command execution is achieved, as demonstrated by the MobaXterm://calc URI.

Affected Software

3 affected components

Mobatek MobaXterm=11.1

Mobatek MobaXterm=12.1

Microsoft Windows

Event History

Sep 14, 2019

CVE Published

via MITRE·02:04 PM

Data Sourced

via MITRE·02:04 PM

Description

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2019-16305.

What is the severity of CVE-2019-16305?

The severity of CVE-2019-16305 is high, with a severity value of 8.8.

What is the affected software?

The affected software is MobaXterm versions 11.1 and 12.1.

How does the vulnerability in MobaXterm 11.1 and 12.1 work?

The vulnerability in MobaXterm 11.1 and 12.1 allows for command injection through a crafted link, triggering popups that ask for user confirmation to execute the commands.

Is Microsoft Windows affected by CVE-2019-16305?

No, Microsoft Windows is not vulnerable to CVE-2019-16305.

Where can I find more information about CVE-2019-16305?

You can find more information about CVE-2019-16305 at this link: https://freetom.github.io/0day/2019/09/14/MobaXterm-command-exec-in-protocol-handler.html