CVE-2019-1405KEV ยท OVERDUECWE-269privilege-escalation

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

High ยท published November 13, 2019

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 98.2th percentile for exploit probability.

1662
days past CISA
deadline
CVSS v3.1
7.8
EPSS
30%
Percentile
98.2
In the wild
Confirmed
What it is

๐Ÿšจ A careless UPnP service is allowing attackers to create COM objects, like a bouncer letting in anyone with a fake ID! Think of it as a club where the security checks IDs but forgets to check if the person is even on the guest list โ€” they just need the right story to get in! An attacker could leverage this vulnerability to elevate their privileges, gaining access to perform any action they desire on the system. This could result in unauthorized data access, system modifications, or even a complete takeover of the affected device!

Put simply

Think of it as a club where the security checks IDs but forgets to check if the person is even on the guest list โ€” they just need the right story to get in! This elevation of privilege vulnerability in the Windows UPnP service arises because it improperly allows the creation of COM objects by untrusted sources, giving attackers a way to escalate their permissions.

What to do

An attacker could leverage this vulnerability to elevate their privileges, gaining access to perform any action they desire on the system. This could result in unauthorized data access, system modifications, or even a complete takeover of the affected device! Immediately apply patches provided by Microsoft to address this vulnerability. Disabling UPnP if it's not in use can also help reduce exposure. Ensure your security settings are configured to limit unauthorized access and regularly audit your system for vulnerabilities. You've got this! By taking these steps, you'll help keep your system safe and sound! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
7.8 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.30168 ยท 98.2th percentile
Weakness
CWE-269 ยท Improper Privilege Management
Published
2019-11-13T00:15Z
KEV added
2022-03-15 ยท due 2022-04-05
Affected products (29)
ProductVersionsFixed in
microsoft/windows_10_1507all versionsโ€”
microsoft/windows_10_1507all versionsโ€”
microsoft/windows_10_1607all versionsโ€”
microsoft/windows_10_1607all versionsโ€”
microsoft/windows_10_1709all versionsโ€”
microsoft/windows_10_1709all versionsโ€”
microsoft/windows_10_1709all versionsโ€”
microsoft/windows_10_1803all versionsโ€”
microsoft/windows_10_1803all versionsโ€”
microsoft/windows_10_1803all versionsโ€”
microsoft/windows_10_1809all versionsโ€”
microsoft/windows_10_1809all versionsโ€”
microsoft/windows_10_1809all versionsโ€”
microsoft/windows_10_1903all versionsโ€”
microsoft/windows_10_1903all versionsโ€”
microsoft/windows_10_1903all versionsโ€”
microsoft/windows_7all versionsโ€”
microsoft/windows_7all versionsโ€”
microsoft/windows_8.1all versionsโ€”
microsoft/windows_rt_8.1all versionsโ€”
microsoft/windows_server_1803all versionsโ€”
microsoft/windows_server_1903all versionsโ€”
microsoft/windows_server_2008all versionsโ€”
microsoft/windows_server_2008all versionsโ€”
microsoft/windows_server_2008all versionsโ€”
microsoft/windows_server_2012all versionsโ€”
microsoft/windows_server_2012all versionsโ€”
microsoft/windows_server_2016all versionsโ€”
microsoft/windows_server_2019all versionsโ€”
References (5)
EPSS history
Timeline
  • 15 MAR 00:00Z
    Added to CISA KEV โ€” remediate by Apr 5
    kev
  • 12 NOV 18:53Z
    An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnPโ€ฆ
    cvelistv5