CVE-2019-19115

Published: Oct 8, 2020Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2, 1.5.0, 1.5.1, 1.6.1 and 1.6.2 allows an attacker to execute code with SYSTEM privileges.

Affected (5)

Products: Nahimic: Apo Software Component

Nahimic

1 product

Apo Software Component

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Nahimic Apo Software Component	Version 1.4.2
Nahimic Apo Software Component	Version 1.5.0
Nahimic Apo Software Component	Version 1.5.1
Nahimic Apo Software Component	Version 1.6.1
Nahimic Apo Software Component	Version 1.6.2

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://safebreach.com/Post/Nahimic-APO-Software-Component-Driver-Deployed-with-MSI-Computers-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-19115

Source: cve@mitre.org

ExploitThird Party Advisory

https://safebreach.com/Post/Nahimic-APO-Software-Component-Driver-Deployed-with-MSI-Computers-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-19115

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.