CVE-2019-13069
HIGHExtenua Silvershield < 6.1.14.144 - Incorrect Permission Assignment
Title source: ruleDescription
extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service.
Exploits (1)
exploitdb
WORKING POC
by Ian Bredemeyer · rubylocalmultiple
https://www.exploit-db.com/exploits/47197
Scores
CVSS v3
7.8
EPSS
0.0008
EPSS Percentile
23.8%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-732
Status
published
Products (1)
extenua/silvershield
6.0 - 6.1.14.144
Published
Aug 17, 2019
Tracked Since
Feb 18, 2026