PT-2019-12862 · Openssl+1 · Openssl+1

Rich Mirch · Published 2019-06-21 · Updated 2021-01-12 · CVE-2019-12572

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Private Internet Access (PIA) VPN Client version 1.0.2 (build 02363)

Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The issue arises from the PIA Windows service loading the OpenSSL library, which attempts to load a non-existent configuration file. An attacker can create a malicious configuration file to load a harmful OpenSSL engine library, resulting in arbitrary code execution as SYSTEM when the service starts.

Recommendations For Private Internet Access (PIA) VPN Client version 1.0.2 (build 02363), consider restricting access to the C:etcssl directory to prevent low-privileged users from creating a malicious openssl.cnf configuration file until a patch is available. As a temporary workaround, monitor the service startup process to detect any potential malicious activity.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2019-12572

Affected Products

Openssl

Private Internet Access (Pia) Vpn Client

References · 6

• 🔥 https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12572.txt · Exploit
• 🔥 https://blog.mirch.io/2019/06/10/cve-2019-12572-pia-windows-privilege-escalation-malicious-openssl-engine · Exploit
• https://osv.dev/vulnerability/CVE-2019-12572 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12572 · Security Note
• https://t.me/cvenotify/8422 · Telegram Post
• https://t.me/cibsecurity/21918 · Telegram Post