CVE-2019-10617

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 0.22%
EPSS Percentile: 12.39%
CISA KEV: Not listed

Description

Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registry in QCA6174_9377.WIN.1.0 in QCA6174_9377

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 21-Nov-2019 22:15
Last Modified: 17-Jun-2026 09:11
EPSS Date: 2026-10-24

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

qualcomm / qca6174_firmware
Version / affected range: -
cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:*

References

af854a3a-2127-422b-91ae-364da2661108

Last enrichment sync: 25-Oct-2026 12:40
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

The researchers illustrated this with another attack using Wacom and Atheros packages that exploits a vulnerability (CVE-2019-10617) in an Atheros driver service installed through an INF file rather than a co-installer. Plug and Pwn Attacks Abuse Windows PnP and RDP USB Redirection for SYSTEM Access

People (3)

MITRE ATT&CK (4)

Vendors (5)

Products (3)

Tools (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.