Lucene search

K
nvd[email protected]NVD:CVE-2024-22830
HistoryMay 01, 2024 - 7:15 p.m.

CVE-2024-22830

2024-05-0119:15:22
CWE-284
web.nvd.nist.gov
anti-cheat
ace-base.sys
access control
vulnerability
escalation
privileges
local attacker
windows kernel module
system resources

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

Anti-Cheat Expert’s Windows kernel module β€œACE-BASE.sys” version 1.0.2202.6217 does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level.

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

Related for NVD:CVE-2024-22830