CVE-2019-6534

Опубликовано: 11 апр. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file.

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01
Third Party Advisory
US Government Resource
https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
Release Notes
Vendor Advisory
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec131.pdf
Patch
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01
Third Party Advisory
US Government Resource
https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
Release Notes
Vendor Advisory
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec131.pdf
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gemalto:sentinel_ultrapro_client_library:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:gemalto:sentinel_ultrapro_client_library:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:gemalto:sentinel_ultrapro_client_library:1.3.2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00744

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-427

Связанные уязвимости

GHSA-r644-rc44-q3w7