CVE-2019-9745 Privilege escalation in n/a
A local attacker can escalate privileges to SYSTEM by exploiting insecure named pipe communication in the CloudCTI HIP Integrator Recognition Configuration Tool.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-9745?
CVE-2019-9745 is a high-severity vulnerability in n/a, published on 14 Oct 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognition Update Client Service) via an insecure communication channel (Named Pipe). The data (JSON) sent via this channel is used to import data from CRM software using plugins (.dll files). The plugin to import data from the EXQUISE software (DatasourceExquiseExporter.dll) can be persuaded to start arbitrary programs (including batch files) that are executed using the same privileges as Recognition Update Client Service (NT AUTHORITY\SYSTEM), thus elevating privileges. This occurs because a higher-privileged process executes scripts from a directory writable by a lower-privileged user.
Weakness: CWE-269
Which versions are affected by CVE-2019-9745?
It affects 1 product.
Products include Cloudcti Hip Integrator Recognition Configuration Tool.
How do I fix CVE-2019-9745?
No fix has been published for CVE-2019-9745 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-9745 being exploited?
There is no known exploitation of CVE-2019-9745 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-wpc2-299v-98f6.