2 matches found
CVE-2018-20404: Improper Input Validation
ETKE900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary uncontrollable address, resulting in an eternal hang or a BSoD...
7.8CVSS5.8AI score0.01477EPSS
SaveExploits1References2
PT-2018-15356
Name of the Vulnerable Software and Affected Versions ETK E900.sys affected versions not specified Description The issue allows for a denial of service attack. It is triggered via IOCTL 0x9C402048, which invokes a function that uses memmove and constantly fails on an arbitrary address, resulting ...
7.8CVSS0.01477EPSS
SaveExploits1References2
20