CVE-2019-9745

CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognition Update Client Service) via an insecure communication channel (Named Pipe). The data (JSON) sent via this channel is used to import data from CRM software using plugins (.dll files). The plugin to import data from the EXQUISE software (DatasourceExquiseExporter.dll) can be persuaded to start arbitrary programs (including batch files) that are executed using the same privileges as Recognition Update Client Service (NT AUTHORITY\SYSTEM), thus elevating privileges. This occurs because a higher-privileged process executes scripts from a directory writable by a lower-privileged user.

• CWE-269

• https://github.com/KPN-CISO/CVE-2019-9745/blob/master/README.mdExploit, Third Party Advisory
• https://www.cloudcti.nl/Site/SecurityVendor Advisory
• https://github.com/KPN-CISO/CVE-2019-9745/blob/master/README.mdExploit, Third Party Advisory
• https://www.cloudcti.nl/Site/SecurityVendor Advisory

Published

Oct 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9738jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving …
• CVE-2019-9740An issue was discovered in urllib2 in Python 2.x through 2.7…6.1
• CVE-2019-9741An issue was discovered in net/http in Go 1.11.5. CRLF injec…6.1
• CVE-2019-9742gdwfpcd.sys in G Data Total Security before 2019-02-22 allow…
• CVE-2019-9743An issue was discovered on PHOENIX CONTACT RAD-80211-XD and …
• CVE-2019-9744An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, …
• CVE-2019-9746In libwebm before 2019-03-08, a NULL pointer dereference cau…
• CVE-2019-9747In tinysvcmdns through 2018-01-16, a maliciously crafted mDN…
• CVE-2019-9748In tinysvcmdns through 2018-01-16, an mDNS server processing…
• CVE-2019-9749An issue was discovered in the MQTT input plugin in Fluent B…7.5
• CVE-2019-9750In IoTivity through 1.3.1, the CoAP server interface can be …
• CVE-2019-9751An issue was discovered in Open Ticket Request System (OTRS)…