CVE-2019-25288
Raw vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XSummary
CVE-2019-25288 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Wacom WTabletService (inferred from references). Its CVSS base score is 8.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception by Unquoted Path (T1574.009); ranked at the 5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified map to CM-6 (Configuration Settings) and RA-5 (Vulnerability Monitoring and Scanning) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2019-25288 is an unquoted service path vulnerability in Wacom WTabletService version 6.6.7-3. This flaw occurs when the Windows service executable path is not properly quoted, allowing local attackers to hijack the service by placing a malicious executable in a directory preceding the legitimate service binary in the system's search path.
Local attackers with low privileges can exploit this vulnerability by inserting a malicious executable file into the service path. Upon service restart or system reboot, the malicious code executes with elevated privileges, potentially granting high-impact confidentiality, integrity, and availability compromises as scored by CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base score 7.8). The issue maps to CWE-428 (Unquoted Search Path or Element).
Advisories and references, including an Exploit-DB entry (exploit 47593) providing proof-of-concept code, a VulnCheck advisory detailing the unquoted service path in WTabletService and WTabletServicePro, and the Wacom vendor site, highlight the vulnerability but do not specify patches in the available information. Security practitioners should verify service paths and apply any vendor updates from Wacom.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2019-19387
Vulnerability Data
Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability that allows local attackers to execute malicious code with elevated privileges. Attackers can insert an executable file in the service path to run unauthorized code when the service restarts or the…
more
system reboots.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Directly enables service path hijacking via unquoted executable path for local privilege escalation.
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
Mitigating Controls (NIST 800-53 r5) AI
Requires identification, reporting, and correction of system flaws such as the unquoted service path vulnerability in Wacom WTabletService to prevent exploitation.
Mandates establishment and enforcement of secure configuration settings for services, including properly quoted executable paths to block hijacking via unquoted paths.
Provides for regular vulnerability scanning that identifies configuration weaknesses like unquoted service paths in CVE-2019-25288 for timely remediation.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Secure SDLC practices directly prevent path-handling flaws such as unquoted elements during development.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing in development can detect unquoted search-path issues before deployment.
Enforcing controlled software installation can prevent unquoted search-path elements in executables and scripts.
Secure development lifecycle practices include input validation and path handling that reduce unquoted search-path weaknesses.
Secure system architecture and engineering principles require safe path construction and quoting conventions.
Secure coding standards directly mandate quoting search paths and avoiding unsafe path construction.
Change-management processes can enforce review of path-handling changes that might introduce unquoted elements.