CVE-2019-5619 is a critical stack-based buffer overflow vulnerability (CWE-121) affecting AASync.com AASync version 2.2.1.0. This flaw allows for unauthenticated, remote attackers to execute arbitrary code with high impact on confidentiality, integrity, and availability, as indicated by its CVSS score of 9.8. Exploit code is publicly available via a Metasploit module, and its high EPSS score of 0.65865 suggests a significant likelihood of exploitation. While not on the CISA KEV catalog, the presence of a Metasploit module and community discussion confirms its exploitability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.2.1.0CPE matchmatch criteria | cpe:2.3:a:aasync:aasync:2.2.1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.