CVE-2020-11520

EUVD-2020-3873
The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
Affected Products (NVD)
VendorProductVersion
winmagicsecuredoc
𝑥
≤ 8.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1
https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2/
https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1
https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2/