{"id":"CVE-2019-14479","aliases":["EUVD-2019-5664","GHSA-cw4x-cxpm-9p3r"],"status":"published","title":"AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read...","description":"AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch server software.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04213,"percentile":0.91051,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732","CWE-78"],"published":"2020-12-16T16:39:42Z","modified":"2026-06-17T02:18:31Z","products":[{"vendor":"adremsoft","product":"netcrunch"}],"references":[{"url":"https://www.adremsoft.com/support/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://compass-security.com/fileadmin/Research/Advisories/2020-13_CSNC-2019-014_AdRem_NetCrunch_Remote_Code_Execution.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14479"},{"url":"https://github.com/advisories/GHSA-cw4x-cxpm-9p3r"}],"sources":{"cve":[{"id":"CVE-2019-14479","description":"AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch server software.","status":"published","published":"2020-12-16T16:39:42Z","modified":"2024-08-05T00:19:41.131Z","updated_at":"2026-11-02T14:20:17.722148Z"}],"euvd":[{"id":"EUVD-2019-5664","description":"AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch server software.","status":"published","published":"2020-12-16T16:39:42Z","modified":"2024-08-05T00:19:41Z","updated_at":"2026-11-03T02:40:39.508511Z"}],"ghsa":[{"id":"GHSA-cw4x-cxpm-9p3r","title":"AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read...","description":"AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch server software.","status":"published","published":"2022-05-24T17:36:38Z","modified":"2023-01-29T05:05:06Z","cwes":["CWE-732"],"updated_at":"2026-11-02T14:45:42.563524Z"}],"nvd":[{"id":"CVE-2019-14479","description":"AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server running the NetCrunch server software.","status":"published","published":"2020-12-16T17:15:13.047Z","modified":"2026-06-17T02:18:31.423Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:05:48.502374Z"}]}}