CVE Feed

    Dashboard / CVE / CVE-2019-19894

    CVE-2019-19894

    In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renaming and replacing %SYSTEMDRIVE%\IXP\DATA\IXPAS.IXP.

    Published:Jan 23, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 23, 2020
    EPSS Score:0.00134
    CVSS Score:5.5

    Affected Products

    Vendor
    Ixpdata
    Product
    Easyinstall

    Exploits

    https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-softwarehttps://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software

    Related CVEs

    CVE-2023-27791 (CVSS 8.1) — An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecur…
    CVE-2023-30132 (CVSS 7.8) — An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via stat…
    CVE-2023-30131 (CVSS 9.8) — An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated …
    CVE-2023-27795 (CVSS 7.8) — An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static …
    CVE-2023-27793 (CVSS 7.8) — An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges…
    CVE-2023-27792 (CVSS 7.8) — An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of pe…
    CVE-2022-35120 (CVSS 8.8) — IXPdata EasyInstall 6.6.14725 contains an access control issue.…
    CVE-2019-19893 (CVSS 7.5) — In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unaut…
    CVE-2019-19895 (CVSS 7.8) — In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a cli…
    CVE-2019-19896 (CVSS 9.9) — In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High