winmagic_sd

关于 CVE-2020-11519 和 CVE-2020-11520 的技术文章 日期：2020年6月 作者：Dennis Elser（代码：github） 目录 引言 方法及技术描述 CVE-2020-11519 CVE-2020-11520 概念验证漏洞利用 披露时间线 解决方案 校验和 参考 引言 根据其官方网站介绍，Winmagic SecureDoc “使企业能够高效地处理其 IT...

Exploit for CVE-2020-11519

This is a PoC exploit for CVE-2020-11519 and CVE-2020-11520, two...

CVE-2020-11519

CVE-2020-11519 affects WinMagic SecureDoc, specifically the SDDisk2k.sys driver in v8.5 and earlier. A local attacker can read/write physical disk sectors via the .\SecureDocDevice handle, leading to privileged code execution. The vulnerability is confirmed across multiple sources, with CVSS v3.1...

CVE-2020-11519

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...