CVE-2019-13475

CVE-2019-13475 describes an argument injection vulnerability in MobaXterm 11.1, affecting the mobaxterm: URI handler. This flaw allows remote attackers to execute arbitrary commands on a user's system by crafting a malicious URL, leveraging the -exec argument and obscuring the attack with -hideterm and -exitwhendone. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impact. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the high FAUCET Risk Score of 71/100 indicates its potential severity.