Lucene search

[email protected]CVE-2019-12042

HistoryMay 23, 2019 - 2:29 p.m.

CVE-2019-12042

2019-05-2314:29:07

CWE-732

[email protected]

web.nvd.nist.gov

cve-2019-12042

insecure permissions

panda products

privilege escalation

event queue

agentsvc.exe

information security

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, which leads to privilege escalation when the CmdLineExecute event is queued. This affects Panda Antivirus, Panda Antivirus Pro, Panda Dome, Panda Global Protection, Panda Gold Protection, and Panda Internet Security.

Affected configurations

NVD

Node

pandasecuritypanda_antivirusRange<18.07.03

pandasecuritypanda_antivirus_proRange<18.07.03

pandasecuritypanda_domeRange<18.07.03

pandasecuritypanda_global_protectionRange<18.07.03

pandasecuritypanda_gold_protectionRange<18.07.03

pandasecuritypanda_internet_securityRange<18.07.03

CPENameOperatorVersion
pandasecurity:panda_antiviruspandasecurity panda antiviruslt18.07.03
pandasecurity:panda_antivirus_propandasecurity panda antivirus prolt18.07.03
pandasecurity:panda_domepandasecurity panda domelt18.07.03
pandasecurity:panda_global_protectionpandasecurity panda global protectionlt18.07.03
pandasecurity:panda_gold_protectionpandasecurity panda gold protectionlt18.07.03
pandasecurity:panda_internet_securitypandasecurity panda internet securitylt18.07.03

CPE	Name	Operator	Version
pandasecurity:panda_antivirus	pandasecurity panda antivirus	lt	18.07.03
pandasecurity:panda_antivirus_pro	pandasecurity panda antivirus pro	lt	18.07.03
pandasecurity:panda_dome	pandasecurity panda dome	lt	18.07.03
pandasecurity:panda_global_protection	pandasecurity panda global protection	lt	18.07.03
pandasecurity:panda_gold_protection	pandasecurity panda gold protection	lt	18.07.03
pandasecurity:panda_internet_security	pandasecurity panda internet security	lt	18.07.03

References

github.com/SouhailHammou/Panda-Antivirus-LPE

rce4fun.blogspot.com/2019/05/panda-antivirus-local-privilege.html

www.pandasecurity.com/usa/support/card?id=100063

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

Related for CVE-2019-12042

nvd1 cvelist1 prion1