Lucene search

[email protected]CVE-2019-19115

HistoryOct 08, 2020 - 10:15 p.m.

CVE-2019-19115

2020-10-0822:15:00

CWE-427

[email protected]

web.nvd.nist.gov

nahimic

apo

software

component

driver

vulnerability

privilege escalation

system privileges

cve-2019-19115

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

19.8%

JSON

An escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2, 1.5.0, 1.5.1, 1.6.1 and 1.6.2 allows an attacker to execute code with SYSTEM privileges.

CPENameOperatorVersion
nahimic:apo_software_componentnahimic apo software componenteq1.4.2
nahimic:apo_software_componentnahimic apo software componenteq1.5.0
nahimic:apo_software_componentnahimic apo software componenteq1.5.1
nahimic:apo_software_componentnahimic apo software componenteq1.6.1
nahimic:apo_software_componentnahimic apo software componenteq1.6.2

CPE	Name	Operator	Version
nahimic:apo_software_component	nahimic apo software component	eq	1.4.2
nahimic:apo_software_component	nahimic apo software component	eq	1.5.0
nahimic:apo_software_component	nahimic apo software component	eq	1.5.1
nahimic:apo_software_component	nahimic apo software component	eq	1.6.1
nahimic:apo_software_component	nahimic apo software component	eq	1.6.2

References

safebreach.com/Post/Nahimic-APO-Software-Component-Driver-Deployed-with-MSI-Computers-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-19115

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

19.8%

JSON

Related for CVE-2019-19115

cvelist1 prion1