Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-7245

Опубликовано: 25 мар. 2020
Источник: nvd
CVSS3: 7.2
CVSS2: 9
EPSS Низкий

Описание

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:techpowerup:gpu-z:*:*:*:*:*:*:*:*
Версия до 2.23.0 (исключая)

EPSS

Процентиль: 62%
0.00427
Низкий

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-665

Связанные уязвимости

github
больше 3 лет назад

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

EPSS

Процентиль: 62%
0.00427
Низкий

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-665