[ CVE-2019-1405 · Published 12 Nov 2019 ]
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS 30%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-15
- Known to be used in ransomware campaigns
- EPSS: 30% chance of exploitation in the next 30 days (higher than 98% of CVEs)
[ Description ]Official description
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.
CISA: A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 5 Apr 2022): Apply updates per vendor instructions.
- Patch on portal.msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- packetstormsecurity.com/files/155723/Microsoft-UPnP-Local-Privilege-Elevation.htmlThird Party AdvisoryVDB Entry
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1405PatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource