PT-2019-3515 · Microsoft · Windows

Publicado 2019-10-08 · Atualizado 2025-02-04 · CVE-2019-1322

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified)

Description The issue is related to insufficient authentication in Windows operating systems, allowing an attacker to potentially elevate their privileges by running a specially crafted application. This could impact the system, enabling attackers to affect it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2019-03690

CVE-2019-1322

Produtos afetados

Windows

Referências · 29

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/comahawk.rb · Exploit
• 🔥 https://exploit-db.com/exploits/47684 · Exploit
• 🔥 http://packetstormsecurity.com/files/155723/Microsoft-UPnP-Local-Privilege-Elevation.html · Exploit
• 🔥 https://exploit-db.com/exploits/47805 · Exploit
• 🔥 https://packetstormsecurity.com/files/155723/Microsoft-UPnP-Local-Privilege-Elevation.html · Exploit
• https://t.me/secharvester/7969 · Publicação no Telegram
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota
• https://t.me/rnetsec/10893 · Publicação no Telegram
• https://t.me/rnetsec/10882 · Publicação no Telegram
• https://t.me/defcon_news/30219 · Publicação no Telegram
• https://t.me/canyoupwnme/6135 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-1322 · Nota de Segurança
• https://t.me/aptreports/5225 · Publicação no Telegram
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1322 · Nota
• https://t.me/freedomf0x/4668 · Publicação no Telegram