Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2019-13028: An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version b

63
This week
HIGH 8.8WATCHLISTUPGRADEUPGRADE

CVE-2019-13028 is a high-severity flaw (CVSS 8.8) affecting electronic identification cards client, electronic identification cards client. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.3) allows remote attackers to execute arbitrary code (.cgi, .pl, or .php) or delete arbitrary files via a crafted HTML page. This is a product from the Ministry of Interior of the Slovak Republic.

Why this priority

  • High severity
  • Public exploit reference
  • On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score8.8 (High)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionRequired
EPSS exploit chance3.7% (top 10%)
CISA exploited listNo
WeaknessCWE-284
Published2019-06-28
Last modified2026-06-17
Publisher (CNA): MITRE · Vendor: minv

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

minv electronic identification cards client UPGRADE
Affected: < 3.0.3
Fixed in: 3.0.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy electronic-identification-cards-client || rpm -q electronic-identification-cards-client || electronic-identification-cards-client --version
2. UPGRADE to 3.0.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade electronic-identification-cards-client
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade electronic-identification-cards-client
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
minv electronic identification cards client UPGRADE
Affected: < 3.1.2
Fixed in: 3.1.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy electronic-identification-cards-client || rpm -q electronic-identification-cards-client || electronic-identification-cards-client --version
2. UPGRADE to 3.1.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade electronic-identification-cards-client
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade electronic-identification-cards-client
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2019-13028?

electronic identification cards client: upgrade to 3.0.3; electronic identification cards client: upgrade to 3.1.2. Exact commands for each OS are on this page.

Is CVE-2019-13028 being exploited?

CVE-2019-13028 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2019-13028 affect?

CVE-2019-13028 affects electronic identification cards client, electronic identification cards client. Severity is high (CVSS 8.8). An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.3) allows remote attackers to execute arbitrary code (.cgi, .pl, or .php) or delete arbitrary files via a crafted HTML p

How urgent is CVE-2019-13028?

Priority 63/100. High severity; Public exploit reference; On your watchlist

Software pages

PHP vulnerabilities · Windows vulnerabilities

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.