CVE-2019-12574 - CVE House
Back to Database
Status published High CVE-2019-12574

A vulnerability in the London Trust Media Private Internet Access...

Vulnerability Description

A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The updater loads several libraries from a folder that authenticated users have write access to. A low privileged user can leverage this vulnerability to execute arbitrary code as SYSTEM.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12574

Credits & Attribution

No credits recorded in the NVD database.

References

More from londontrustmedia

View All →
CVE-2019-12579
A vulnerability in the London Trust Media Private Internet Access...
High 7.8
CVE-2019-12578
A vulnerability in the London Trust Media Private Internet Access...
High 7.8
CVE-2019-12577
A vulnerability in the London Trust Media Private Internet Access...
High 7.8
CVE-2019-12576
A vulnerability in the London Trust Media Private Internet Access...
High 7.8
CVE-2019-12575
A vulnerability in the London Trust Media Private Internet Access...
High 7.8

Affected Vendor

londontrustmedia

View all reports →

Affected Software

private internet access vpn client
Vulnerable Versions:
1.0

Timeline

Official Publish: July 11th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.