Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gc5v-4mhp-vqp4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A privilege escalation vulnerability exists in the tdts.ko chrdev_ioctl_handle functionality of Trend Micro, Inc. Home Network Security 6.1.567. A specially crafted ioctl can lead to increased privileges. An attacker can issue an ioctl to trigger this vulnerability.

A privilege escalation vulnerability exists in the tdts.ko chrdev_ioctl_handle functionality of Trend Micro, Inc. Home Network Security 6.1.567. A specially crafted ioctl can lead to increased privileges. An attacker can issue an ioctl to trigger this vulnerability.

EPSS

Процентиль: 34%
0.00137
Низкий

7.8 High

CVSS3

Дефекты

CWE-269
CWE-787

Связанные уязвимости

CVSS3: 7.8
nvd
больше 4 лет назад

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute low-privileged code on the target device in order to exploit this vulnerability.

EPSS

Процентиль: 34%
0.00137
Низкий

7.8 High

CVSS3

Дефекты

CWE-269
CWE-787