CVE-2018-5701

In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
iolosystem_shield
5.0.0.136
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-Escalation.html
https://www.exploit-db.com/exploits/43929/
https://www.greyhathacker.net/?p=1006
http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-Escalation.html
https://www.exploit-db.com/exploits/43929/
https://www.greyhathacker.net/?p=1006