winmagic_sd

Analyse technique de CVE-2020-11519 et CVE-2020-11520 Date : juin 2020 Auteur : Dennis Elser code : github Table des matières Introduction Approche et description technique CVE-2020-11519 CVE-2020-11520 Exploit de preuve de concept Calendrier de divulgation Solution Sommes de contrôle Références...

EUVD-2020-3873

Malware in sbrugna...

EUVD-2020-3872

Malware in sbrugna...

EUVD-2018-12899

Malware in sbrugna...

Exploit for CVE-2020-11519

This is a PoC exploit for CVE-2020-11519 and CVE-2020-11520, two...

Unspecified Vulnerability in WinMagic SecureDoc SDDisk2k.sys

WINMAGIC SecureDoc is a data security and disk encryption solution from WINMAGIC Canada. A security vulnerability in the SDDisk2k.sys driver in WINMAGIC SecureDoc 8.5 and earlier versions, which stems from a lack of pointer validation in the IOCTL scheduler, can be exploited by a local attacker t...

Unspecified vulnerability in WINMAGIC SecureDoc SDDisk2k.sys (CNVD-2021-25668)

WINMAGIC SecureDoc is a data security and disk encryption solution from WINMAGIC Canada. A security vulnerability in the SDDisk2k.sys driver in WINMAGIC SecureDoc v8.5 and earlier versions can be exploited by a local attacker to execute code with elevated privileges via ＼.SecureDocDevice...

CVE-2020-11520

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11519

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11520

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

Design/Logic Flaw

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...

Input validation

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11519

CVE-2020-11519 affects WinMagic SecureDoc, specifically the SDDisk2k.sys driver in v8.5 and earlier. A local attacker can read/write physical disk sectors via the .\SecureDocDevice handle, leading to privileged code execution. The vulnerability is confirmed across multiple sources, with CVSS v3.1...

CVE-2020-11519

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11520

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11520

CVE-2020-11520 affects WinMagic SecureDoc

CVE-2020-11520: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11519: Undefined Security Weakness

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...

PT-2020-12662

Name of the Vulnerable Software and Affected Versions WinMagic SecureDoc versions 8.5 and earlier Description The issue allows local users to read or write to physical disc sectors via a .SecureDocDevice handle, resulting in privileged code execution. Recommendations For WinMagic SecureDoc versio...

PT-2020-12663

Name of the Vulnerable Software and Affected Versions WinMagic SecureDoc versions 8.5 and earlier Description The issue allows local users to write to arbitrary kernel memory addresses due to the lack of pointer validation in the IOCTL dispatcher of the SDDisk2k.sys driver. This can result in...