Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-2126
ipd
integrity protection driver
cve-2002-2126
security
malicious code
system clock
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.
Affected configurations
Node
pedestal_softwareintegrity_protection_driverMatch1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| pedestal_software:integrity_protection_driver | pedestal software integrity protection driver | eq | 1.2 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2002-2126