What is the CVSS score of CVE-2019-1170?

CVE-2019-1170 has a CVSS 3.1 base score of 7.9 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L. EPSS exploitation probability: 2.4%.

Is there a public PoC exploit available for CVE-2019-1170?

Yes, a public proof-of-concept exploit is available for CVE-2019-1170. Prioritise patching immediately. EPSS: 2.4%.

Is there a patch available for CVE-2019-1170?

Yes, a patch is available for CVE-2019-1170. Update the affected software to the latest version immediately.

Windows 10 CVE-2019-1170

HIGH

Missing Authorization (CWE-862)

2019-08-14 secure@microsoft.com

Authentication Bypass Windows 10 Windows Server 2016 Windows Server 2019

7.9

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.9 HIGH

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

CVE Published

Aug 14, 2019 - 21:15 cve.org

HIGH 7.9

DescriptionCVE.org

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system. The security update addresses the vulnerability by preventing sandboxed processes from creating reparse points targeting inaccessible files.

AnalysisAI

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. Rated high severity (CVSS 7.9), this vulnerability is low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Missing Authorization (CWE-862), which allows attackers to access resources or perform actions without proper authorization checks. An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system. The security update addresses the vulnerability by preventing sandboxed processes from creating reparse points targeting inaccessible files. Affected products include: Microsoft Windows 10, Microsoft Windows Server 2016, Microsoft Windows Server 2019.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Implement role-based access control, validate authorization on every request server-side, apply principle of least privilege.