CVE-2019-7669: Prima Systems FlexAir, Versions 2.3.38 and prior.

Security readout for executives and security teams

CVE-2019-7669 affects Prima Systems FlexAir 2.3.38 and earlier. An authenticated user could abuse weak upload file-extension checks to place and run malicious applications from the web root, with root privileges. This is a serious risk for affected access-control deployments, even though the provided sources do not confirm active exploitation. Exposure appears limited to Prima Systems FlexAir versions 2.3.38 and prior, where an attacker has authenticated access to the web application. Systems exposing the FlexAir web interface to broader networks carry higher operational risk. Treat this as high priority for affected physical access-control environments. The risk is not just data exposure; successful abuse could give root-level execution on the application host. Mitigation focus: Identify all Prima Systems FlexAir deployments and versions.; Restrict FlexAir web access to trusted administrative networks.; Review vendor and CISA guidance for fixed versions or official mitigations..

Prepared

Jun 6, 2026, 20:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.