CVE-2019-14482 - CVE House
Back to Database
Status published Critical CVE-2019-14482

AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability...

Vulnerability Description

AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcoded SSL private key is used across different customers' installations when no other SSL certificate is installed, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-14482

Credits & Attribution

No credits recorded in the NVD database.

References

More from adremsoft

View All →
CVE-2019-14483
AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read...
High 8.8
CVE-2019-14481
AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability...
Medium 5.4
CVE-2019-14480
AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in...
Critical 9.8
CVE-2019-14479
AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch...
High 8.8
CVE-2019-14478
AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability...
Medium 5.4

Affected Vendor

Affected Software

netcrunch
Vulnerable Versions:
0

Timeline

Official Publish: December 16th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.