CVE-2018-19592

The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default

published September 27, 2019

CVSS
—
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\SYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01089 · 65.1th percentile
Published
2019-09-27T15:04Z
EPSS history
Timeline
  • 27 SEP 15:04Z
    The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default
    cvelistv5