CVE-2019-16514: Malicious File Upload
Published Jan 23, 2020
·Updated
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. The server allows remote code execution. Administrative users could upload an unsigned extension ZIP file containing executable code that is subsequently executed by the server.
Affected Software
1 affected component
ConnectWise Control=19.3.25270.7185
Event History
Jan 23, 2020
CVE Published
via MITRE·05:21 PM
Data Sourced
via MITRE·05:21 PM
Description
Frequently Asked Questions
1
What is CVE-2019-16514?
CVE-2019-16514 is a vulnerability discovered in ConnectWise Control 19.3.25270.7185 that allows remote code execution.
2
How severe is CVE-2019-16514?
CVE-2019-16514 has a severity rating of 7.2 (high).
3
How can I fix CVE-2019-16514?
To fix CVE-2019-16514, update ConnectWise Control to a version that is not affected by the vulnerability.
4
Are all versions of ConnectWise Control affected by CVE-2019-16514?
No, only version 19.3.25270.7185 of ConnectWise Control is affected by CVE-2019-16514.
5
Is there any additional information about CVE-2019-16514?
Yes, you can find more information about CVE-2019-16514 in the references provided.