Improper access control

2019-06-0516:29:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API.

CPENameOperatorVersion
sound_devicelt2.29

CPE	Name	Operator	Version
	sound_device	lt	2.29

References

support.lenovo.com/us/en/product_security/LEN-25822

twitter.com/Jackson_T

www.synaptics.com/company/blog/