CVE Feed

    Dashboard / CVE / CVE-2018-8060

    CVE-2018-8060

    HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. This affects IOCTLs higher than 0x85FE2600 with the HWiNFO32 symbolic device name.

    Published:May 10, 2018
    Last Modified:Nov 21, 2024
    EPS:May 10, 2018
    EPSS Score:0.00798
    CVSS Score:5.5

    Affected Products

    Vendor
    Hwinfo
    Product
    Amd64 Kernel Driver

    Exploits

    https://github.com/otavioarj/SIOCtlhttps://github.com/otavioarj/SIOCtlhttps://github.com/otavioarj/SIOCtl

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High