CVE-2019-6517
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
BD FACSLyric Research Use Only, Windows 10 Professional Operating System, U.S. and Malaysian Releases, between November 2017 and November 2018 and BD FACSLyric IVD Windows 10 Professional Operating System US release does not properly enforce user access control to privileged accounts, which may allow for unauthorized access to administrative level functions.
BD FACSLyric Research Use Only, para el sistema operativo Windows 10 Professional Operating System, en las distribuciones de EEUU y Malasia entre noviembre de 2017 y noviembre de 2018; y BD FACSLyric IVD, para el sistema operativo Windows 10 Professional Operating System, en las distribuciones de EEUU, no aplican correctamente el control de acceso de usuarios a las cuentas privilegiadas, lo que podría permitir el acceso no autorizado a las funciones de nivel administrativo.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-01-22 CVE Reserved
- 2019-02-06 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/106766 | Third Party Advisory | |
| https://ics-cert.us-cert.gov/advisories/ICSMA-19-029-02 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Bd Search vendor "Bd" | Facslyric Search vendor "Bd" for product "Facslyric" | - | - |
Affected
| ||||||
| Bd Search vendor "Bd" | Facslyric Ivd Search vendor "Bd" for product "Facslyric Ivd" | - | - |
Affected
| ||||||