PT-2019-2538 · Synaptics · Synaptics Sound Device Drivers

Publicado 2019-04-12 · Atualizado 2020-08-24 · CVE-2019-9730

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Synaptics Sound Device drivers versions prior to 2.29

Description The issue is related to insufficient access control in the CxUtilSvc component of the Synaptics Sound Device drivers. This can be exploited by a local attacker to elevate privileges in the Windows Registry using an unpublished API.

Recommendations For versions prior to 2.29, update to version 2.29 or later to resolve the issue. As a temporary workaround, consider restricting access to the CxUtilSvc component until a patch is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2019-02383

CVE-2019-9730

Produtos afetados

Synaptics Sound Device Drivers

Referências · 10

• 🔥 https://github.com/jthuraisamy/CVE-2019-9730 · Exploit
• 🔥 https://twitter.com/Jackson_T · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9730 · Nota de Segurança
• https://t.me/canyoupwnme/5407 · Publicação no Telegram
• https://support.lenovo.com/us/en/product_security/LEN-25822 · Aviso do Fabricante
• https://t.me/defcon_news/11141 · Publicação no Telegram
• https://synaptics.com/company/blog · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02383 · Nota de Segurança
• https://support.hp.com/us-en/document/c06298607 · Nota
• https://osv.dev/vulnerability/CVE-2019-9730 · Aviso do Fabricante