CVE-2019-12176: High severity htc viveport vulnerability
Published Jun 3, 2019
·Updated
Privilege escalation in the "HTC Account Service" and "ViveportDesktopService" in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges to SYSTEM via reconfiguration of either service.
Affected Software
1 affected component
HTC Viveport<1.0.0.36
Event History
Jun 3, 2019
CVE Published
via MITRE·07:25 PM
Data Sourced
via MITRE·07:25 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2019-12176.
2
What is the affected software?
The affected software is HTC VIVEPORT before version 1.0.0.36.
3
How severe is CVE-2019-12176?
CVE-2019-12176 has a severity level of 7.8 (high).
4
How can an attacker exploit CVE-2019-12176?
An attacker can exploit CVE-2019-12176 by escalating privileges to SYSTEM via reconfiguration of either the "HTC Account Service" or "ViveportDesktopService" in HTC VIVEPORT.
5
Are there any references for CVE-2019-12176?
Yes, you can find more information about CVE-2019-12176 at the following links: [here](https://community.viveport.com/) and [here](https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8).