PT-2019-6410 · Phoenix · Phoenix Sct Winflash

Published 2019-08-10 · Updated 2024-10-15 · CVE-2019-18279

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Phoenix SCT WinFlash versions 1.1.12.0 through 1.5.74.0

Description The issue is related to the included drivers in Phoenix SCT WinFlash, which could be used by a malicious Windows application to gain elevated privileges. The adverse impacts are limited to the Windows environment, and there is no known direct impact to the UEFI firmware. This issue was fixed in late June 2019.

Recommendations For Phoenix SCT WinFlash versions 1.1.12.0 through 1.5.74.0, update to a version released after late June 2019 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2023-08701

CVE-2019-18279

Affected Products

Phoenix Sct Winflash

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2019-18279 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18279 · Vendor Advisory
• https://phoenix.com/content/uploads/Security-Newsletter-September-2019.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08701 · Security Note
• https://eclypsium.com/2019/08/10/screwed-drivers-signed-sealed-delivered · Note
• https://wimsbios.com/files/flashers/phoenix/winphlash-user-guide.pdf · Note
• https://t.me/cvenotify/98181 · Telegram Post
• https://t.me/cvenotify/62988 · Telegram Post
• https://eclypsium.com/wp-content/uploads/2019/08/EXTERNAL-Get-off-the-kernel-if-you-cant-drive-DEFCON27.pdf · Note
• https://github.com/advisories/GHSA-3r4p-wv9v-57xw · Note
• https://aures-support.com/DATA/drivers/CD_POSLIGNE_3.0/Common/BiosTool/Phoenix/Windows/WinFlash_SCT_UG.pdf · Note