CVE-2019-9163: Marchnetworks Command Client

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects.

Affected products

• Marchnetworks Command Client: before 2.7.2 (fixed in 2.7.2)

Published 2020-04-01. Last modified 2026-06-17.