Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-7246

Опубликовано: 18 мая 2020
Источник: nvd
CVSS3: 6.7
CVSS2: 4.6
EPSS Низкий

Описание

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:amd:atillk64:5.11.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 21%
0.00068
Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

github
больше 3 лет назад

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

EPSS

Процентиль: 21%
0.00068
Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo