CVE-2019-7588 : Security Advisory and Response
Learn about CVE-2019-7588, a privilege escalation vulnerability in exacqVision ESM v5.12.2 and earlier versions on Windows OS. Find mitigation steps and how to prevent unauthorized access.
A vulnerability in the exacqVision Enterprise System Manager (ESM) v5.12.2 application could lead to unauthorized privilege escalation, affecting Windows operating systems. This CVE impacts versions 5.12.2 and earlier, excluding version 19.03 and newer.
Understanding CVE-2019-7588
This CVE involves a privilege escalation vulnerability in the exacqVision Enterprise System Manager (ESM) application.
What is CVE-2019-7588?
The vulnerability in exacqVision ESM v5.12.2 allows unauthorized users to escalate privileges by manipulating files, potentially granting system-level access.
The Impact of CVE-2019-7588
- CVSS Score: 6.7 (Medium Severity)
- Attack Vector: Local
- Attack Complexity: High
- Privileges Required: Low
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
- User Interaction: Required
- Scope: Unchanged
Technical Details of CVE-2019-7588
This section provides detailed technical information about the vulnerability.
Vulnerability Description
The vulnerability arises from insecure file permissions in the Windows operating system, allowing unauthorized privilege escalation within exacqVision ESM.
Affected Systems and Versions
- ExacqVision ESM versions 1.x to 5.x (<=5.12.2) are affected.
- Version 19.03 and newer are not vulnerable.
Exploitation Mechanism
- Malicious actors can replace a system-level executable with a harmful file, triggering a system restart to execute the malicious code.
Mitigation and Prevention
To address CVE-2019-7588, follow these mitigation steps:
Immediate Steps to Take
- Change file permissions for the exacqVision ESM installation folder on Windows 10.
- Disable inheritance and remove 'Authorized Users' or 'Users' with 'Special' or 'Modify' access.
Long-Term Security Practices
- Regularly review and update file permissions to prevent unauthorized modifications.
- Implement least privilege access to limit user capabilities.
Patching and Updates
- Apply the provided KB mitigation (link in references) or upgrade to version 19.03 or later.