CVE-2019-7281

high

Description

Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.

References

Advisories

https://www.us-cert.gov/ics/advisories/icsa-19-211-02

https://www.applied-risk.com/resources/ar-2019-007

https://applied-risk.com/labs/advisories

Details

Source: Mitre, NVD

Published: 2019-07-01

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.01134

Detections

Analytics