VA MAX

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

VA MAX records in CISA KEV

No VA MAX vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2019-15724 CVE-2019-25671 · GHSA-gx46-63hv-r9x3

VA MAX 8.3.4 Remote Code Execution via changeip.php

HIGH 73

VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00683 Published 2026-04-05 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0