CVE-2019-19235

EPSS 0.2%
Veröffentlicht 18.12.2019 14:15:10
Zuletzt bearbeitet 21.11.2024 04:34:23
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Asus ≫ Atk Package Version < 1.0.0061

Microsoft ≫ Windows 10 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.426

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7	1	5.9	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/

Vendor Advisory

https://safebreach.com/blog

Third Party Advisory

https://www.asus.com/support/faq/1041545

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-19235

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-19235

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-19235

EUVD