CVE-2019-13355: High severity totaldefense antivirus vulnerability
In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\ used by ccschedulersvc.exe allows local attackers to hijack dotnetproxy.exe, which leads to privilege escalation when the ccSchedulerSVC service runs the executable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13355?
CVE-2019-13355 is classified as a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2019-13355?
To mitigate CVE-2019-13355, ensure proper access controls are applied to the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\.
Who is affected by CVE-2019-13355?
CVE-2019-13355 primarily affects users of Total Defense Anti-virus version 9.0.0.773.
What attack vector is used in CVE-2019-13355?
CVE-2019-13355 can be exploited by local attackers taking advantage of insecure access controls.
What can attackers do using CVE-2019-13355?
Attackers can hijack dotnetproxy.exe to achieve privilege escalation when the ccSchedulerSVC service executes the compromised executable.