PT-2019-15697 · Patriot · Patriot Viper Rgb

Hashim Jawad · Publicado 2019-11-09 · Atualizado 2020-03-18 · CVE-2019-18845

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Patriot Viper RGB versions prior to 1.1

Description The issue allows local users, including those with low integrity processes, to read and write to arbitrary memory locations. This can lead to the gain of NT AUTHORITYSYSTEM privileges by mapping DevicePhysicalMemory into the calling process via ZwOpenSection and ZwMapViewOfSection functions.

Recommendations For Patriot Viper RGB versions prior to 1.1, update to version 1.1 or later to resolve the issue.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2019-18845

Produtos afetados

Patriot Viper Rgb

Referências · 5

• 🔥❌ https://github.com/expFlash/CVE-2019-18845 · Exploit, Deleted
• 🔥❌ https://github.com/Exploitables/CVE-2019-18845 · Exploit, Deleted
• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-012.md · Nota
• https://osv.dev/vulnerability/CVE-2019-18845 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18845 · Nota de Segurança