CVE-2019-12310: Exagrid Backup Appliance Firmware

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including Base64 encoded 'support' credentials, leading to administrative access of the device.

Affected products

• Exagrid Backup Appliance Firmware: version 48.1.1044.p50 only

Published 2019-06-03. Last modified 2026-06-17.