Lucene search
HistoryAug 05, 2022 - 4:15 a.m.
CVE-2022-37415
uniwill sparkio.sys
buffer overflow
vulnerability
ioctl 0x40002008
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
17.8%
The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008.
Affected configurations
Node
uniwillsparkio.sysMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| uniwill | sparkio.sys | 1.0 | cpe:2.3:a:uniwill:sparkio.sys:1.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-37415
2022-08-05 04:15:09
cvelist
cvelist
CVE-2022-37415
2022-08-05 03:57:05
prion
prion
Stack overflow
2022-08-05 04:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
17.8%
Related for NVD:CVE-2022-37415