7.3
CVE-2019-13208
- EPSS 0.05%
- Veröffentlicht 03.07.2019 23:15:10
- Zuletzt bearbeitet 21.11.2024 04:24:27
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginWavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Maxx ≫ Waves Maxx Audio Version1.9.29.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.114 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.3 | 1.3 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.4 | 3.4 | 6.4 |
AV:L/AC:M/Au:N/C:P/I:P/A:P
|
CWE-732 Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.