Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Corsair Subscribe
Filtered by product Corsair Utility Engine
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12441 1 Corsair 1 Corsair Utility Engine 2020-08-24 7.2 HIGH 7.8 HIGH
The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary commands via modification of the CorsairService BINARY_PATH_NAME, leading to complete control of the affected system. The issue exists due to the Windows "Everyone" group being granted SERVICE_ALL_ACCESS permissions to the CorsairService Service.