Vulnerabilities > CVE-2018-19323 - Unspecified vulnerability in Gigabyte products

047910
CVSS 9.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
COMPLETE
network
low complexity
gigabyte
critical
NVD
Published: 2018-12-21
Updated: 2020-05-19

Summary

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

Vulnerable Configurations

Part Description Count
Application
Gigabyte
5

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/150894/CORE-2018-0007.txt
idPACKETSTORM:150894
last seen2018-12-25
published2018-12-21
reporterCore Security Technologies
sourcehttps://packetstormsecurity.com/files/150894/GIGABYTE-Driver-Privilege-Escalation.html
titleGIGABYTE Driver Privilege Escalation

References