VDB
CVE-2019-1310
CVE-2019-1310
PUBLISHED
CVSS 8.699999809265137 HIGH
In verschiedenen Microsoft Windows Betriebssystemen existieren mehrere Schwachstellen. Sie beruhen auf Fehlern bei der Verarbeitung von Objekten im Speicher oder Fehlern bei der Verarbeitung von Benutzereingaben durch den Microsoft Hyper-V auf einem Hostserver oder den Microsoft Hyper-V-Netzwerkswitch auf einem Hostserver. Ein authentisierter Angreifer kann dieses zu einem Denial of Service Angriff nutzen.
EPSS 0.93% · 76.5th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.93%
76.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Windows Azure Stack | |
| Microsoft | Microsoft Windows Server 2012 | |
| Microsoft | Microsoft Windows Server 2008 R2 SP1 | |
| Microsoft | Microsoft Windows 7 | |
| Microsoft | Microsoft Windows 10 | |
| Microsoft | Microsoft Windows Server 2019 | |
| Microsoft | Microsoft Windows Server 2008 SP2 | |
| Microsoft | Microsoft Windows Server 2012 R2 | |
| Microsoft | Microsoft Windows 8.1 | |
| Microsoft | Microsoft Windows Server | |
| Microsoft | Microsoft Windows RT 8.1 | |
| Microsoft | Microsoft Windows Server 2016 |
Exploit Intelligence
- https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog (certbund)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
…and 6 more exploits
Timeline
- Nov 12, 2019 CVE Published
- Jan 10, 2021 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 22, 2021 PoC Published
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2023-0884.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0884 advisory
- https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog exploit
- https://portal.msrc.microsoft.com/de-de/security-guidance advisory
- http://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2019/11.html advisory