9.3

CVE-2019-12177

Exploit
Privilege escalation due to insecure directory permissions affecting ViveportDesktopService in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges via DLL hijacking.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Htc ≫ Viveport Version < 1.0.0.36
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.4% 0.689
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://community.viveport.com/
Vendor Advisory
https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8
Third Party Advisory
Exploit
https://posts.specterops.io/razer-synapse-3-elevation-of-privilege-6d2802bd0585
Not Applicable