Lucene search

MitreCVE-2019-9730

HistoryJun 05, 2019 - 4:29 p.m.

CVE-2019-9730

2019-06-0516:29:01

mitre

web.nvd.nist.gov

cve-2019-9730

access control

cxutilsvc

synaptics sound device drivers

windows registry

unpublished api

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API.

Affected configurations

Nvd

Node

synapticssound_deviceRange<2.29

VendorProductVersionCPE
synapticssound_device*cpe:2.3:a:synaptics:sound_device:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
synaptics	sound_device	*	cpe:2.3:a:synaptics:sound_device::::::::

References

support.lenovo.com/us/en/product_security/LEN-25822

twitter.com/Jackson_T

www.synaptics.com/company/blog/

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2019-9730