Lucene search

Kaspersky LabKLA20228

HistoryFeb 14, 2023 - 12:00 a.m.

KLA20228 OSI vulnerability in Microsoft Device

2023-02-1400:00:00

Kaspersky Lab

threats.kaspersky.com

information disclosure

microsoft device

sensitive information

malicious users

vulnerability

install updates

windows update

hololens 1

osi

security bypass

abuser information.

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

3.1 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

4.3 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.0%

JSON

An information disclosure vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

CVE-2019-15126

CVE list

CVE-2019-15126 warning

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.