CVE-2019-0657 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 91%

Affected Products (NVD)

Vendor	Product	Version
microsoft	.net_core	1.0
microsoft	.net_core	2.1
microsoft	.net_core	2.2
microsoft	powershell_core	6.0
microsoft	powershell_core	6.1
microsoft	visual_studio_2017	-
microsoft	visual_studio_2017	15.9
microsoft	.net_framework	2.0:sp2
microsoft	.net_framework	3.0:sp2
microsoft	.net_framework	3.5
microsoft	.net_framework	3.5.1
microsoft	.net_framework	4.5.2
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.6
microsoft	.net_framework	4.6.1
microsoft	.net_framework	4.6.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.7.2
microsoft	.net_framework	4.7
microsoft	.net_framework	4.7.1
microsoft	.net_framework	4.7.2

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

(x64, x86)	KB4487018
1607 (x64, x86)	KB4487026
1703 (x64, x86)	KB4487020
1709 (arm64, x64, x86)	KB4486996
1803 (arm64, x64, x86)	KB4487017
1809 (x64, x86)	KB4483452

Windows 7

Service Pack 1 (x64, x64, x64, x86, x86, x86)

Windows 8.1

(x64, x64, x64, x86, x86, x86)

Windows RT 8.1

All

Windows Server

1709 Server Core	KB4486996
1803 Server Core	KB4487017

Windows Server 2008

Service Pack 2 (x64, x64, x64, x86, x86, x86)

Windows Server 2008 R2

Service Pack 1 (x64, x64, x64)	KB4487121
Service Pack 1 Server Core (x64, x64, x64)	KB4487121

Windows Server 2012

Server Core	KB4487122
Standard	KB4487122

Windows Server 2012 R2

Server Core	KB4487123
Standard	KB4487123

Windows Server 2016

Server Core	KB4487026
Standard	KB4487026

Windows Server 2019

Server Core	KB4483452
Standard	KB4483452

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

http://www.securityfocus.com/bid/106890

https://access.redhat.com/errata/RHSA-2019:0349

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657

http://www.securityfocus.com/bid/106890

https://access.redhat.com/errata/RHSA-2019:0349

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657