CVE-2018-19323

GIGABYTE Multiple Products Privilege Escalation

9.8 CRITICALActively exploited (CISA KEV)Used in ransomwarePublic exploitEPSS 8.36%

Published21 Dec 2018
Added to CISA KEV24 Oct 2022
Remediation due14 Nov 2022

Description

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Gigabyte Aorus Graphics Engine< 1.57

Gigabyte App Center≤ 1.05.21

Gigabyte Oc Guru Ii2.08

Gigabyte Xtreme Gaming Engine< 1.26

Remediation

Fixed in

Gigabyte Aorus Graphics Engine≥ 1.57

Gigabyte Xtreme Gaming Engine≥ 1.26

Patch & vendor advisories

https://www.gigabyte.com/Support/Security/1801

References

http://seclists.org/fulldisclosure/2018/Dec/39ExploitMailing ListThird Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-19323US Government Resource
https://www.gigabyte.com/Support/Security/1801Vendor Advisory
https://www.gigabyte.com/tw/Support/Utility/Graphics-CardProduct
https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilitiesBroken LinkExploitThird Party Advisory
http://www.securityfocus.com/bid/106252Broken LinkThird Party AdvisoryVDB Entry

Frequently asked

Is CVE-2018-19323 being actively exploited?

Yes. CVE-2018-19323 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 24 Oct 2022. It has been used in ransomware campaigns.

How severe is CVE-2018-19323?

CVE-2018-19323 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 8.36% probability of exploitation.

Which products are affected by CVE-2018-19323?

Affected products include Gigabyte Aorus Graphics Engine, Gigabyte App Center, Gigabyte Oc Guru Ii, Gigabyte Xtreme Gaming Engine.

How do I fix CVE-2018-19323?

Upgrade affected software to a fixed version, for example Gigabyte Aorus Graphics Engine 1.57, Gigabyte Xtreme Gaming Engine 1.26 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2018-19323 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.