CVE-2019-10804

Published February 28th, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation.

es128/serial-number

:id: Reads the machine's serial number (a.k.a. service/asset tag) or Amazon EC2 instance-id

GitHub