Vulnerability of the GDrv driver – a program for configuring Gigabyte Aorus Engine graphics cards. The GIGABYTE App Center, a program for managing applications. The Extreme Gaming Engine, a program for monitoring the status of graphics cards. It allows a hacker to execute arbitrary code.

🗓️ 07 Nov 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Access control flaw in GDrv driver and Gigabyte engine tools allows arbitrary code execution.

Reporter	Title	Published	Views	Family All 19
GithubExploit	Exploit for CVE-2018-19323	27 Aug 202511:51	–	githubexploit
ATTACKERKB	CVE-2018-19323	21 Dec 201800:00	–	attackerkb
Circl	CVE-2018-19323	14 Jun 202321:10	–	circl
CISA KEV Catalog	GIGABYTE Multiple Products Privilege Escalation Vulnerability	24 Oct 202200:00	–	cisa_kev
CNVD	Arbitrary Code Execution Vulnerability in Multiple GIGABYTE Products (CNVD-2018-26459)	25 Dec 201800:00	–	cnvd
CNVD	Arbitrary Code Execution Vulnerability in Multiple GIGABYTE Products	21 Dec 201800:00	–	cnvd
CVE	CVE-2018-19323	21 Dec 201823:00	–	cve
Cvelist	CVE-2018-19323	21 Dec 201823:00	–	cvelist
Tenable Nessus	GIGABYTE AORUS GRAPHICS ENGINE < 1.57 Multiple Vulnerabilities	11 Jan 202300:00	–	nessus
Tenable Nessus	GIGABYTE APP Center < 19.4.22.1 Multiple Vulnerabilities	11 Jan 202300:00	–	nessus

Vulners

Node

gigabyte_technology_co.,gigabyte_app_centerRange≤1.05.21

OR

gigabyte_technology_co.,xtreme_gaming_engineRange≤1.25

OR

gigabyte_technology_co.,aorus_graphics_engineRange≤1.33

OR

gigabyte_technology_co.,oc_guru_iiMatch2.08

Source	Link
gigabyte	www.gigabyte.com/Support/Utility/Graphics-Card
gigabyte	www.gigabyte.com/Support/Utility/Motherboard
seclists	www.seclists.org/fulldisclosure/2018/Dec/39
securityfocus	www.securityfocus.com/bid/106252
gigabyte	www.gigabyte.com/Support/Security/1801
gigabyte	www.gigabyte.com/tw/Support/Utility/Graphics-Card
secureauth	www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 26.8

CVSS 37.8

EPSS0.14716

access control flaw Gigabyte driver Gigabyte Aorus Engine App Center Extreme Gaming Engine arbitrary code execution