High severity · published Dec 21, 2018
CVE-2018-19321
GIGABYTE Multiple Products Privilege Escalation Vulnerability
RansomwareIn wildKEV
7.8
CVSS
3.7%
EPSS
Yes
On KEV
Description
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildYes
CISA KEVListed Oct 24, 2022
Federal remediation dueNov 14, 2022
Ransomware campaign useKnown
Affected products
Which versions
AG
Aorus Graphics Engine · Gigabyte
before 1.57 · source: NVD
AC
App Center · Gigabyte
before 19.0422.1 · source: NVD
OG
OC Guru II · Gigabyte
2.08 · source: NVD
XG
Xtreme Gaming Engine · Gigabyte
before 1.26 · source: NVD
MP
Multiple Products · GIGABYTE
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-19321
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-19321
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
mailing-list
http://seclists.org/fulldisclosure/2018/Dec/39
x_refsource_MISC
https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities
vdb-entry
http://www.securityfocus.com/bid/106252
x_refsource_CONFIRM
https://www.gigabyte.com/Support/Security/1801
More from Aorus Graphics Engine
9.8
CVE-2018-19323
GIGABYTE Multiple Products Privilege Escalation Vulnerability
7.8
CVE-2018-19322
GIGABYTE Multiple Products Code Execution Vulnerability
7.8
CVE-2018-19320
GIGABYTE Multiple Products Unspecified Vulnerability