CVE-2019-7651: High severity emsisoft anti-malware vulnerability
EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILEDEVICESECUREOPEN and therefore files and directories "inside" the \\.\EPP device are not properly protected, leading to unintended impersonation or object creation. This vulnerability has been fixed in version 2018.12 and later.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-7651?
The severity of CVE-2019-7651 is considered to be medium, as it can lead to unauthorized access due to ACL bypass.
How do I fix CVE-2019-7651?
To fix CVE-2019-7651, update Emsisoft Anti-Malware to version 2018.12 or later.
What causes CVE-2019-7651?
CVE-2019-7651 is caused by EPP.sys failing to enforce proper access controls on the \\.\EPP device.
Who is affected by CVE-2019-7651?
Users of Emsisoft Anti-Malware prior to version 2018.12 are affected by CVE-2019-7651.
What type of vulnerability is CVE-2019-7651?
CVE-2019-7651 is classified as an access control vulnerability that allows unauthorized impersonation.