Vulnerabilities > CVE-2019-7651 - Unspecified vulnerability in Emsisoft Anti-Malware

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

emsisoft

NVD

Published: 2019-02-08

Updated: 2020-08-24

Summary

EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\EPP device are not properly protected, leading to unintended impersonation or object creation. This vulnerability has been fixed in version 2018.12 and later.

Vulnerable Configurations

Part	Description	Count
Application	Emsisoft Emsisoft Anti Malware 2017.2 Emsisoft Anti Malware 2017.3 Emsisoft Anti Malware 2017.4 Emsisoft Anti Malware 2017.5 Emsisoft Anti Malware 2017.6 Emsisoft Anti Malware 2017.7 Emsisoft Anti Malware 2017.8 Emsisoft Anti Malware 2017.9 Emsisoft Anti Malware 2017.10 Emsisoft Anti Malware 2017.11 Emsisoft Anti Malware 2017.12 Emsisoft Anti Malware 2018.1 Emsisoft Anti Malware 2018.2 Emsisoft Anti Malware 2018.3 Emsisoft Anti Malware 2018.4 Emsisoft Anti Malware 2018.5 Emsisoft Anti Malware 2018.8.1.8923 Emsisoft Anti Malware 2018.9.2 Emsisoft Anti Malware 2018.10 Emsisoft Anti Malware 2018.10.1 Emsisoft Anti Malware 2018.11 Emsisoft Anti Malware 2018.12	22

Summary

Vulnerable Configurations

References