Critical severity · published Dec 21, 2018
CVE-2018-19323
GIGABYTE Multiple Products Privilege Escalation Vulnerability
RansomwareIn wildKEV
9.8
CVSS
8.4%
EPSS
Yes
On KEV
Description
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)8.4% · higher than 95% of CVEs
Exploited in the wildYes
CISA KEVListed Oct 24, 2022
Federal remediation dueNov 14, 2022
Ransomware campaign useKnown
Affected products
Which versions
AG
Aorus Graphics Engine · Gigabyte
before 1.57 · source: NVD
GA
Gigabyte App Center · Gigabyte
through 1.05.21 · source: NVD
OG
OC Guru II · Gigabyte
2.08 · source: NVD
XG
Xtreme Gaming Engine · Gigabyte
before 1.26 · source: NVD
MP
Multiple Products · GIGABYTE
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-19323
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-19323
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
mailing-list
http://seclists.org/fulldisclosure/2018/Dec/39
x_refsource_MISC
https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities
vdb-entry
http://www.securityfocus.com/bid/106252
x_refsource_CONFIRM
https://www.gigabyte.com/tw/Support/Utility/Graphics-Card
x_refsource_CONFIRM
https://www.gigabyte.com/Support/Security/1801
More from Aorus Graphics Engine
7.8
CVE-2018-19322
GIGABYTE Multiple Products Code Execution Vulnerability
7.8
CVE-2018-19321
GIGABYTE Multiple Products Privilege Escalation Vulnerability
7.8
CVE-2018-19320
GIGABYTE Multiple Products Unspecified Vulnerability