high7.8Public exploit code
CVE-2019-13069
extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SilverSHielD 6.x - Local Privilege Escalation2019-08-01 · local · multiple
Impact
extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Extenua | Silvershield | from 6.0 through 6.1.14.144 |