PT-2019-13182 · Waves · Waves Maxxaudio

Publicado 2019-07-03 · Atualizado 2020-08-24 · CVE-2019-13208

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Waves MAXX Audio version 1.9.29.0

Description The issue allows for privilege escalation due to the General registry key having Full Control access for the Users group, which can lead to DLL side loading through WavesSysSvc64.exe.

Recommendations For version 1.9.29.0, restrict access to the General registry key to prevent Full Control access for the Users group, thereby mitigating the risk of DLL side loading through WavesSysSvc64.exe.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2019-13208

Produtos afetados

Waves Maxxaudio

Referências · 3

• 🔥 https://versprite.com/blog/security-research/windows-registry · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13208 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-13208 · Aviso do Fabricante