Description
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.
References (4)
Scores
CVSS v3
8.8
EPSS
0.0459
EPSS Percentile
89.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-494
Status
published
Products (1)
comparex/miss_marple
< 2.0
Published
Dec 20, 2018
Tracked Since
Feb 18, 2026