CVE-2018-19592
Last modified
CVE-2018-19592 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\SYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441.. EPSS estimates a 1.09% chance of exploitation in the next 30 days.
Description
The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\SYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Corsair | Link | 4.9.7.35 |
References
- http://forum.corsair.com/v3/showthread.php?t=155646Release Notes, Vendor Advisory
- https://github.com/BradyDonovan/CVE-2018-19592/blob/master/CLink4ServiceThird Party Advisory
- http://forum.corsair.com/v3/showthread.php?t=155646Release Notes, Vendor Advisory
- https://github.com/BradyDonovan/CVE-2018-19592/blob/master/CLink4ServiceThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-19592?
How severe is CVE-2018-19592?
How do I fix CVE-2018-19592?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-19586Silverpeas 5.15 through 6.0.2 is affected by an authenticate…
- CVE-2018-19587In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c…
- CVE-2018-19588Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Co…
- CVE-2018-19589Incorrect Access Controls of Security Officer (SO) in PKCS11…
- CVE-2018-1959IBM Security Identity Manager 7.0.1 Virtual Appliance contai…5.1
- CVE-2018-19591In the GNU C Library (aka glibc or libc6) through 2.28, atte…7.5
- CVE-2018-19595PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to …
- CVE-2018-19596Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML…
- CVE-2018-19597CMS Made Simple 2.2.8 allows XSS via an uploaded SVG documen…
- CVE-2018-19598Statamic 2.10.3 allows XSS via First Name or Last Name to th…
- CVE-2018-19599Monstra CMS 1.6 allows XSS via an uploaded SVG document to t…5.4
- CVE-2018-19600Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&…
Are you affected by CVE-2018-19592?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST