// For flags

CVE-2019-5434

Revive Adserver 4.2 - Remote Code Execution

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. Such vulnerability could be used to perform various types of attacks, e.g. exploit serialize-related PHP vulnerabilities or PHP object injection. It is possible, although unconfirmed, that the vulnerability has been used by some attackers in order to gain access to some Revive Adserver instances and deliver malware through them to third party websites. This vulnerability was addressed in version 4.2.0.

Un atacante podría enviar una carga específicamente creada al script de invocación XML-RPC y activar la llamada unserialize() en el parámetro "what" en el método RPC "openads.spc". Dicha vulnerabilidad podría utilizarse para realizar varios tipos de ataques, por ejemplo, aprovechar las vulnerabilidades de PHP relacionadas con la serialización o la inyección de objetos PHP. Es posible, aunque no confirmado, que la vulnerabilidad haya sido usada por algunos atacantes para conseguir acceso a algunas peticiones Revive Adserver y enviar malware a través de sitios web de terceros. Esta vulnerabilidad fue tratada en la versión 4.2.0.

Revive Adserver version 4.2 suffers from a code execution vulnerability.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-01-04 CVE Reserved
  • 2019-05-06 CVE Published
  • 2019-12-03 First Exploit
  • 2024-08-04 CVE Updated
  • 2024-09-26 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-502: Deserialization of Untrusted Data
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Revive-sas
Search vendor "Revive-sas"
 Revive Adserver
Search vendor "Revive-sas" for product "Revive Adserver"
 < 4.2.0
Search vendor "Revive-sas" for product "Revive Adserver" and version " < 4.2.0"
-
Affected