CVE-2019-7651: emsisoft anti-malware
Vulnerability summary
CVE-2019-7651 is a high (CVSS 7.5) vulnerability in emsisoft anti-malware. EPSS estimates a 4.89% chance of exploitation in the next 30 days, higher than 91.9% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 08-02-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\EPP device are not properly protected, leading to unintended impersonation or object creation. This vulnerability has been fixed in version 2018.12 and later.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.89%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.89% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundNafiez.Github.Io
Maturity: poc
Exploit Reference (nafiez.github.io)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Emsisoft1 product
- anti-malware≤ 2018.12
1 vendor · 1 product
References
4 links- github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-01-09-emsisoft-Anti-Malware-bypass.mdX Refsource MISCExploitThird Party Advisory
- nafiez.github.io/security/bypass/2019/01/08/emsisoft-Anti-Malware-bypass.htmlX Refsource MISCExploitThird Party Advisory
- blog.emsisoft.com/en/32517/new-in-2018-12-safe-web-browsing-with-emsisoft-browser-security/X Refsource MISCRelease NotesVendor Advisory