Dell Watchdog Timer < 2.0.0.1 Privilege Escalation (DSA-2026-248)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(339708);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/27");

  script_cve_id("CVE-2026-61407");
  script_xref(name:"IAVA", value:"2026-A-0865");

  script_name(english:"Dell Watchdog Timer < 2.0.0.1 Privilege Escalation (DSA-2026-248)");

  script_set_attribute(attribute:"synopsis", value:
"The Dell Watchdog Timer Driver installed on the remote Windows host is affected by a privilege escalation vulnerability.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, the Dell Watchdog Timer kernel driver (WDTKernel.sys) on the remote
Windows host is prior to 2.0.0.1. It is, therefore, affected by an exposed IOCTL with insufficient access control
vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to privilege
escalation.

Note that Nessus has not tested for this issue but has instead relied only on the driver's self-reported version
number.");
  # https://www.dell.com/support/kbdoc/en-us/000501078/dsa-2026-248-security-update-for-dell-watchdog-timer-driver-for-an-exposed-ioctl-with-insufficient-access-control-vulnerability
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?8becbc54");
  script_set_attribute(attribute:"solution", value:
"Update the Dell Watchdog Timer Driver to version 2.0.0.1 or later.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-61407");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/18");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/26");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"x-cpe:/a:dell:watchdog_timer_driver");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("dell_watchdog_timer_driver_win_installed.nbin");
  script_require_keys("installed_sw/Dell Watchdog Timer Driver", "SMB/Registry/Enumerated");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [
    {'scope': 'target', 'match': {'os': 'windows'}}
  ],
  'checks': [
    {
      'product': {'name': 'Dell Watchdog Timer Driver', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'fixed_version': '2.0.0.1'}
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);