High severity · published Jul 19, 2019
CVE-2019-7590
ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path
7.8
CVSS
0.8%
EPSS
No
On KEV
Description
ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to elevate privileges on the system. This issue affects: Exacq Technologies, Inc. exacqVision Server 9.6; 9.8. This issue does not affect: Exacq Technologies, Inc. exacqVision Server version 9.4 and prior versions; 19.03. It is not known whether this issue affects: Exacq Technologies, Inc. exacqVision Server versions prior to 8.4.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Exacqvision Server · Johnsoncontrols
9.6; 9.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-7590
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-7590
Third Party Advisory
http://www.securityfocus.com/bid/109307
Patch
https://gallery.technet.microsoft.com/scriptcenter/Windows-Unquoted-Service-190f0341
Exploit
https://packetstormsecurity.com/files/152128/exacqVision-9.8-Unquoted-Service-Path-Privilege-Escalation.html
Mitigation
https://www.johnsoncontrols.com/cyber-solutions/security-advisories
Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-199-01
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5515.php
More from Exacqvision Server
7.5
CVE-2024-32758
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange
7.5
CVE-2021-27665
An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition
7.3
CVE-2024-32865
Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices