CVE-2019-3025

CRITICAL

Oracle Hospitality RES 3700 5.7 - Remote Code Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-3025 has a selected CVSS score of 9.0 (critical); EIP currently links 1 catalogued exploit.

Description

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the vulnerability is in Oracle Hospitality RES 3700, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality RES 3700. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 15, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Hospitality RES 3700

Browse Oracle Corporation / Hospitality RES 3700
CVE List5.7affected

Proofs of concept

1

Catalogued exploits

ExploitDBOracle Hospitality RES 3700 5.7 - Remote Code ExecutionExploitDB exploitby Walid FaourNot analyzed1 file
ExploitDB
PoC details

References

3