Paper/Archive/CVE-2018-19323

CVE-2018-19323

GIGABYTE Multiple Products — GIGABYTE Multiple Products Privilege Escalation Vulnerability

KEV · due 14 Nov ransomware use EPSS 8%public exploit SSVC act CVSS 9.8

CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 95.0.950 × 2019.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refseclists.org/fulldisclosure/2018/Dec/39 refsecureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities refsecurityfocus.com/bid/106252 refgigabyte.com/tw/Support/Utility/Graphics-Card refgigabyte.com/Support/Security/1801 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-19323 kevcisa.gov/known-exploited-vulnerabilities-catalog