Corsair Utility Engine

corsair_utility_engine

Vendor: Corsair • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-12441

1Corsair

1Corsair Utility Engine

Nov 21, 2024

Oct 11, 2018

N/A· v4

7.8 HIGH· v3

7.2 HIGH· v2

The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary commands via modification of the CorsairService BINARY_PATH_NAME, leading to complete control of the affected system. The issue exists due to the Windows "Everyone" group being granted SERVICE_ALL_ACCESS permissions to the CorsairService Service.Show less