Lucene search
MitreCVE-2024-36056HistoryMay 26, 2024 - 11:15 p.m.
CVE-2024-36056
2024-05-2623:15:21
CWE-269
mitre
web.nvd.nist.gov
46
hw64.sys
unprivileged user-mode processes
arbitrary memory mapping
nt authority\system
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
6.6
Confidence
Low
Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c406490 (for IoAllocateMdl, MmBuildMdlForNonPagedPool, and MmMapLockedPages), leading to NT AUTHORITY\SYSTEM privilege escalation.
Related
vulnrichment
vulnrichment
CVE-2024-36056
1976-01-01 00:00:00
cvelist
cvelist
CVE-2024-36056
1976-01-01 00:00:00
nvd
nvd
CVE-2024-36056
2024-05-26 23:15:21
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
6.6
Confidence
Low
Related for CVE-2024-36056