Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-12441
HistoryOct 11, 2018 - 9:29 p.m.

Default configuration

2018-10-1121:29:00
PRIOn knowledge base
www.prio-n.com
3

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary commands via modification of the CorsairService BINARY_PATH_NAME, leading to complete control of the affected system. The issue exists due to the Windows “Everyone” group being granted SERVICE_ALL_ACCESS permissions to the CorsairService Service.

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2018-12441