winmagic_sd

CVE-2020-11519 및 CVE-2020-11520에 대한 기술적 보고서 날짜: 2020년 6월 작성자: Dennis Elser 코드: github 목차 소개 접근 방식 및 기술 설명 CVE-2020-11519 CVE-2020-11520 개념 증명 익스플로잇 공개 타임라인 해결책 체크섬 참고 자료 소개 웹 표현web representation에 따르면, Winmagic SecureDoc는 "비즈니스가 IT 환경의 보안을 효율적으로 처리할 수 있도록 하는 기능을 제공합니다: 전체 디스크 암호화FDE, 다중 요소 인증, 이동...

EUVD-2020-3873

Malware in sbrugna...

EUVD-2018-12899

Malware in sbrugna...

EUVD-2020-3872

Malware in sbrugna...

Exploit for CVE-2020-11519

This is a PoC exploit for CVE-2020-11519 and CVE-2020-11520, two...

Unspecified Vulnerability in WinMagic SecureDoc SDDisk2k.sys

WINMAGIC SecureDoc is a data security and disk encryption solution from WINMAGIC Canada. A security vulnerability in the SDDisk2k.sys driver in WINMAGIC SecureDoc 8.5 and earlier versions, which stems from a lack of pointer validation in the IOCTL scheduler, can be exploited by a local attacker t...

Unspecified vulnerability in WINMAGIC SecureDoc SDDisk2k.sys (CNVD-2021-25668)

WINMAGIC SecureDoc is a data security and disk encryption solution from WINMAGIC Canada. A security vulnerability in the SDDisk2k.sys driver in WINMAGIC SecureDoc v8.5 and earlier versions can be exploited by a local attacker to execute code with elevated privileges via ＼.SecureDocDevice...

CVE-2020-11520

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11520

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11519

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...

Input validation

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

Design/Logic Flaw

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11519

CVE-2020-11519 affects WinMagic SecureDoc, specifically the SDDisk2k.sys driver in v8.5 and earlier. A local attacker can read/write physical disk sectors via the .\SecureDocDevice handle, leading to privileged code execution. The vulnerability is confirmed across multiple sources, with CVSS v3.1...

CVE-2020-11519

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11520

CVE-2020-11520 affects WinMagic SecureDoc

CVE-2020-11520

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11519: Undefined Security Weakness

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution...

CVE-2020-11520: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

CVE-2018-20341

WINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability, which could allow an attacker to execute arbitrary code on a target system. If the executable is enclosed in quote tags "" then the system will know where to find it. However if the path of where th...

CVE-2018-20341

WINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability, which could allow an attacker to execute arbitrary code on a target system. If the executable is enclosed in quote tags "" then the system will know where to find it. However if the path of where th...