CVE-2019-13069: Extenua Silvershield

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service.

Affected products

• Extenua Silvershield: from 6.0, up to and including 6.1.14.144

Published 2019-08-17. Last modified 2026-06-17.