Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-7240

Опубликовано: 25 мар. 2020
Источник: nvd
CVSS3: 7.2
CVSS2: 9
EPSS Низкий

Описание

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:moo0:system_monitor:1.83:*:*:*:*:*:*:*

EPSS

Процентиль: 62%
0.00427
Низкий

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-665

Связанные уязвимости

github
больше 3 лет назад

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

EPSS

Процентиль: 62%
0.00427
Низкий

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-665