CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Input Validation
Summary: the miss marple updater service in comparex miss marple enterprise edition before 2.0 allows remote attackers to execute arbitrary code with system privileges via vectors related to missing update validation.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-12-20
Last Modified Date: 2019-02-07