PT-2019-9872 · Corsair · Corsair Link

Published 2019-09-27 · Updated 2019-10-01 · CVE-2018-19592

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Corsair Link version 4.9.7.35

Description The issue is related to the "CLink4Service" service, which is installed with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITYSYSTEM, potentially leading to total system takeover.

Recommendations For Corsair Link version 4.9.7.35, consider updating the permissions of the "CLink4Service" service to prevent unprivileged users from taking control of it. As a temporary workaround, restrict access to the service to minimize the risk of exploitation.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2018-19592

Affected Products

Corsair Link

References · 4

• 🔥 https://github.com/BradyDonovan/CVE-2018-19592/blob/master/CLink4Service · Exploit
• http://forum.corsair.com/v3/showthread.php?t=155646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19592 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19592 · Vendor Advisory