SB2019021314 - Security restrictions bypass in Windows Defender Firewall

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019021314

SB2019021314 - Security restrictions bypass in Windows Defender Firewall

Published: February 13, 2019

Security Bulletin ID SB2019021314
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Security restrictions bypass (CVE-ID: CVE-2019-0637)

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to bypass certain security restrictions.

The vulnerability exists due to Windows Defender Firewall incorrectly applies firewall profiles to cellular network connections, when Windows is connected to both an ethernet and a cellular network. A remote attacker can bypass configured firewall policies and perform unauthorized actions against the affected system.

Note, this vulnerability cannot be triggered remotely.


Remediation

Install update from vendor's website.

References