PT-2019-12862 · Openssl+1 · Openssl+1

Rich Mirch · Publicado 2019-06-21 · Atualizado 2021-01-12 · CVE-2019-12572

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Private Internet Access (PIA) VPN Client version 1.0.2 (build 02363)

Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The issue arises from the PIA Windows service loading the OpenSSL library, which attempts to load a non-existent configuration file. An attacker can create a malicious configuration file to load a harmful OpenSSL engine library, resulting in arbitrary code execution as SYSTEM when the service starts.

Recommendations For Private Internet Access (PIA) VPN Client version 1.0.2 (build 02363), consider restricting access to the C:etcssl directory to prevent low-privileged users from creating a malicious openssl.cnf configuration file until a patch is available. As a temporary workaround, monitor the service startup process to detect any potential malicious activity.

Exploit

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-12572

Produtos afetados

Openssl

Private Internet Access (Pia) Vpn Client

Referências · 6

• 🔥 https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12572.txt · Exploit
• 🔥 https://blog.mirch.io/2019/06/10/cve-2019-12572-pia-windows-privilege-escalation-malicious-openssl-engine · Exploit
• https://osv.dev/vulnerability/CVE-2019-12572 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12572 · Nota de Segurança
• https://t.me/cvenotify/8422 · Publicação no Telegram
• https://t.me/cibsecurity/21918 · Publicação no Telegram