PT-2019-15697 · Patriot · Patriot Viper Rgb

Hashim Jawad · Published 2019-11-09 · Updated 2020-03-18 · CVE-2019-18845

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Patriot Viper RGB versions prior to 1.1

Description The issue allows local users, including those with low integrity processes, to read and write to arbitrary memory locations. This can lead to the gain of NT AUTHORITYSYSTEM privileges by mapping DevicePhysicalMemory into the calling process via ZwOpenSection and ZwMapViewOfSection functions.

Recommendations For Patriot Viper RGB versions prior to 1.1, update to version 1.1 or later to resolve the issue.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2019-18845

Affected Products

Patriot Viper Rgb

References · 5

• 🔥❌ https://github.com/expFlash/CVE-2019-18845 · Exploit, Deleted
• 🔥❌ https://github.com/Exploitables/CVE-2019-18845 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2019-18845 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18845 · Security Note
• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-012.md · Note