CVE-2019-25741
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
Mobatek MobaXterm version 12.1 has a buffer overflow vulnerability in the username field of session files. A remote attacker can craft a malicious session file that, when imported and executed, triggers a buffer overflow and allows arbitrary code execution.
Risk Assessment
An attacker could gain remote access to the victim's system with user privileges, potentially leading to data theft or further privilege escalation.
Recommendation
Update MobaXterm to the latest version and avoid importing session files from untrusted sources.
Original NVD description (English source)
Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of session files that allows remote attackers to execute arbitrary code. Attackers can craft a malicious MobaXterm sessions file with overflow data that triggers the vulnerability when imported and executed, enabling reverse shell execution with user privileges.