Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-8060

Опубликовано: 10 мая 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 4.9
EPSS Низкий

Описание

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. This affects IOCTLs higher than 0x85FE2600 with the HWiNFO32 symbolic device name.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:hwinfo:amd64_kernel_driver:*:*:*:*:*:*:*:*
Версия до 8.98 (включая)

EPSS

Процентиль: 74%
0.00798
Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 5.5
github
больше 3 лет назад

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. This affects IOCTLs higher than 0x85FE2600 with the HWiNFO32 symbolic device name.

EPSS

Процентиль: 74%
0.00798
Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-476