Exploitation Summary
EIP tracks 2 public exploits for CVE-2019-9730. PoCs published by jthuraisamy, scaery.
AI-analyzed exploit summary This is a functional local privilege escalation (LPE) exploit for CVE-2019-9730, targeting the Conexant Audio Driver's CxUtilSvc service. It leverages a COM object to modify registry keys and execute commands as SYSTEM by manipulating service paths.
Description
Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API.
Exploits (2)
This is a functional local privilege escalation (LPE) exploit for CVE-2019-9730, targeting the Conexant Audio Driver's CxUtilSvc service. It leverages a COM object to modify registry keys and execute commands as SYSTEM by manipulating service paths.
This repository contains a functional exploit for CVE-2019-9730, which leverages a COM object in the Conexant Audio Driver to perform arbitrary registry reads/writes as SYSTEM. The exploit modifies a service's ImagePath to execute arbitrary commands, achieving local privilege escalation.
References (3)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H