Back
CVE-2019-1584
CRITICAL
A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code execution if the Inspector were sent a malicious command from the Zingbox cloud, or if the Zingbox Inspector were tampered with to connect to an attacker's cloud endpoint.
Published: Oct 9, 2019
Modified: Jun 17, 2026
CWE-77
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| zingbox | inspector | * |
GitHub Security Advisory GHSA-mfwq-256c-f254
A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for...
References (2)
- https://security.paloaltonetworks.com/CVE-2019-1584 Third Party Advisory
- https://security.paloaltonetworks.com/CVE-2019-1584 Third Party Advisory
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
2.84%
Top 14% most likely to be exploited
Threat Score
40.1 / 100
Data Sources
NVD
EPSS
GitHub