CVE-2019-19470

ALTO 7.8CVE-2019-19470 · Published 30/12/2019 · updated 17/06/2026

In breve

CVE-2019-19470 è una vulnerabilità ALTO (CVSS 7.8) che riguarda tinywall (tinywall).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.92%, superiore al 60.6% delle vulnerabilità.
Correzione: aggiornare a 2.1.13 o successiva.

Package	Affected versions	Patched versions
tinywall tinywall	`< 2.1.13`	`2.1.13`

Description

Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product is TinyWall, all versions up to and including 2.1.12. Fixed in version 2.1.13.

References

gist.github.com/pylorak/7df52c9325614676e07782dbe4e81582 · Third Party Advisory
wilderssecurity.com/threads/beta-testing-tinywall.309739/page-62 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free