PT-2019-15788 · Asus · Asus Atk Package

Publicado 2019-12-18 · Atualizado 2021-07-21 · CVE-2019-19235

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUS ATK Package versions prior to V1.0.0061

Description The issue allows for unsigned code execution with no additional execution required. To exploit this, a user must place an application at a specific path with a particular file name.

Recommendations For versions prior to V1.0.0061, update to version V1.0.0061 or later to resolve the issue.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-19235

Produtos afetados

Asus Atk Package

Referências · 5

• https://safebreach.com/blog · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-19235 · Nota de Segurança
• https://asus.com/support/faq/1041545 · Aviso do Fabricante
• https://asus.com/Static_WebPage/ASUS-Product-Security-Advisory · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-19235 · Aviso do Fabricante