Lucene search

[email protected]CVE-2019-19161

HistoryJun 30, 2020 - 2:15 p.m.

CVE-2019-19161

2020-06-3014:15:11

CWE-426

[email protected]

web.nvd.nist.gov

cymiinstaller322

activex

vulnerability

dll

download

miplatform

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification.

Affected configurations

NVD

Node

microsoftwindows_10Match-

microsoftwindows_7Match-

microsoftwindows_8Match-

AND

cymiinstaller322_activex_projectcymiinstaller322_activexRange≤2016.5.26.1

CPENameOperatorVersion
cymiinstaller322_activex_project:cymiinstaller322_activexcymiinstaller322 activex project cymiinstaller322 activexle2016.5.26.1

CPE	Name	Operator	Version
cymiinstaller322_activex_project:cymiinstaller322_activex	cymiinstaller322 activex project cymiinstaller322 activex	le	2016.5.26.1

CNA Affected

[
  {
    "product": "MIPLATFORM",
    "vendor": "TOBESOFT.CO.LTD",
    "versions": [
      {
        "lessThanOrEqual": "2016.5.26.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35479

www.tobesoft.com/Index.do

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

Related for CVE-2019-19161

nvd1 prion1 cvelist1