PT-2020-10161 · Patriot · Patriot Viper Rgb

Published 2020-02-21 · Updated 2020-02-25 · CVE-2019-19452

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Patriot Viper RGB versions through 1.1

Description A buffer overflow issue was discovered when processing IoControlCode 0x80102040. This can be exploited by local attackers, including those with low integrity processes, to gain NT AUTHORITYSYSTEM privileges.

Recommendations For Patriot Viper RGB versions through 1.1, consider restricting access to the IoControlCode 0x80102040 until a patch is available. As a temporary workaround, limiting privileges for low integrity processes may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-19452

Affected Products

Patriot Viper Rgb

References · 5

• 🔥 https://coresecurity.com/advisories/viper-rgb-driver-multiple-vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19452 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19452 · Vendor Advisory
• https://viper.patriotmemory.com · Note
• https://t.me/cvenotify/1135 · Telegram Post