CVEvulnerability
CVE-2019-12176
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-06-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-269
Description
Privilege escalation in the "HTC Account Service" and "ViveportDesktopService" in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges to SYSTEM via reconfiguration of either service.
Affected configurations
• htc viveport (< 1.0.0.36)
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://community.viveport.com/ Vendor Advisory
- https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8 Third Party Advisory
- https://community.viveport.com/ Vendor Advisory
- https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8 Third Party Advisory