CVE-2019-19894

In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent...

5.5 Medium

CVE-2019-19894 is a medium vulnerability (CVSS 5.5) in Ixpdata Easyinstall, published January 23, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. No source names a fixed version.

In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renaming and replacing %SYSTEMDRIVE%\IXP\DATA\IXPAS.IXP.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: None

Exploit likelihood

0.30%Down 0.1 points since Apr 14, 2021

What each source reports

CVE List Score used 5.5

Record: CVE-2019-19894
CVSS 3.0: 5.5 MediumCVSS:3.0/AC:L/AV:L/A:N/C:N/I:H/PR:L/S:U/UI:N
Updated: 2026-11-02

EUVDEUVD-2019-9487 5.5

Record: EUVD-2019-9487
CVSS 3.0: 5.5 MediumCVSS:3.0/AC:L/AV:L/A:N/C:N/I:H/PR:L/S:U/UI:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2r7w-r6xm-q2q9 No score

In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent...

Record: GHSA-2r7w-r6xm-q2q9
Weakness: CWE-20
Updated: 2026-11-02

NVD 5.5

Record: CVE-2019-19894
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Weakness: CWE-732
Updated: 2026-11-02

Affected products

ixpdata easyinstall

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD