Vulnerability record · CVE-2019-17503 · published 11 October 2019
CVE-2019-17503: Kirona DRS unauthenticated access to REGISTER.cmd exposes database details
Kirona · Dynamic Resource Scheduling
Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5 allows an unauthenticated user to directly request /osm/REGISTER.cmd (also /osm_tiles/REGISTER.cmd). That batch file contains SQL queries that reveal sensitive database information such as database version, table names and column names.
Description
An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file. This file exposes SQL database information such as database version, table name, column name, etc.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Automated analysis
medium priorityThe flaw is an unauthenticated information disclosure with public exploit references and high EPSS, but it only exposes database metadata and is not known to be exploited in ransomware or KEV campaigns.
What it is
Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5 allows an unauthenticated user to directly request /osm/REGISTER.cmd (also /osm_tiles/REGISTER.cmd). That batch file contains SQL queries that reveal sensitive database information such as database version, table names and column names.
Impact
An attacker gains reconnaissance-grade database schema and version details without authentication. This information can be used to plan follow-on attacks against the database or application.
Attack surface
Reachable over the network via a direct HTTP request to the exposed .cmd path; no authentication or user interaction is required per the CVSS vector (AV:N/AC:L/PR:N/UI:N).
Exploitation
Public exploit references exist (Packet Storm and a GitHub advisory tagged Exploit), and EPSS is high at roughly 0.48 (98.8th percentile), but the CVE is not listed in CISA KEV.
What to do
- Apply the vendor fix or upgrade Kirona DRS to a version that removes or restricts access to REGISTER.cmd.
- Block direct web access to /osm/REGISTER.cmd and /osm_tiles/REGISTER.cmd at the web server or reverse proxy.
- Remove or relocate the batch file from the web root if it is not required for operation.
- Restrict network access to the DRS web interface to trusted networks or VPN only.
- Review database credentials and schema exposure, and rotate any secrets that may have been disclosed.
Detection
- Monitor web logs for requests to /osm/REGISTER.cmd or /osm_tiles/REGISTER.cmd, especially from unauthenticated or external sources.
- Alert on HTTP 200 responses to .cmd, .bat or .sql paths under the DRS web root.
- Hunt for scanning activity that enumerates known Kirona DRS paths or batch files.
- Correlate access to these paths with subsequent database probing or authentication attempts.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-Disclosure.html | ExploitThird Party AdvisoryVDB Entry |
| https://github.com/Ramikan/Vulnerabilities/blob/master/Kirona-DRS%205.5.3.5%20Multiple%20Vulnerabilities | ExploitThird Party Advisory |
| http://packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-Disclosure.html | ExploitThird Party AdvisoryVDB Entry |
| https://github.com/Ramikan/Vulnerabilities/blob/master/Kirona-DRS%205.5.3.5%20Multiple%20Vulnerabilities | ExploitThird Party Advisory |
Track CVE-2019-17503 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2019-17503), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
