{"api_version":"1","generated_at":"2026-07-23T13:59:41+00:00","cve":"CVE-2019-13550","urls":{"html":"https://cve.report/CVE-2019-13550","api":"https://cve.report/api/cve/CVE-2019-13550.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2019-13550","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-13550"},"summary":{"title":"CVE-2019-13550","description":"In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash.","state":"PUBLIC","assigner":"ics-cert@hq.dhs.gov","published_at":"2019-09-18 21:15:00","updated_at":"2020-10-16 13:19:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-260-01","name":"https://www.us-cert.gov/ics/advisories/icsa-19-260-01","refsource":"MISC","tags":["Third Party Advisory","US Government Resource"],"title":"Advantech WebAccess | CISA","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13550","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13550","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2019","cve_id":"13550","vulnerable":"1","versionEndIncluding":"8.4.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"advantech","cpe5":"webaccess","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2019-13550","ASSIGNER":"ics-cert@hq.dhs.gov","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"WebAccess","version":{"version_data":[{"version_value":"versions 8.4.1 and prior"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"IMPROPER AUTHORIZATION CWE-285"}]}]},"references":{"reference_data":[{"refsource":"MISC","name":"https://www.us-cert.gov/ics/advisories/icsa-19-260-01","url":"https://www.us-cert.gov/ics/advisories/icsa-19-260-01"}]},"description":{"description_data":[{"lang":"eng","value":"In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash."}]}},"nvd":{"publishedDate":"2019-09-18 21:15:00","lastModifiedDate":"2020-10-16 13:19:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":9},"severity":"HIGH","exploitabilityScore":10,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*","versionEndIncluding":"8.4.1","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2019","CveId":"13550","Ordinal":"151910","Title":"CVE-2019-13550","CVE":"CVE-2019-13550","Year":"2019"},"notes":[{"CveYear":"2019","CveId":"13550","Ordinal":"1","NoteData":"In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash.","Type":"Description","Title":null},{"CveYear":"2019","CveId":"13550","Ordinal":"2","NoteData":"2019-09-18","Type":"Other","Title":"Published"},{"CveYear":"2019","CveId":"13550","Ordinal":"3","NoteData":"2019-09-18","Type":"Other","Title":"Modified"}]}}}