CVE-2020-13522

Name of the Vulnerable Software and Affected Versions SoftPerfect RAM Disk version 4.1

Description An arbitrary file delete issue exists due to a specially crafted I/O request packet (IRP) that can be sent by an attacker, allowing an unprivileged user to delete any file on the filesystem. This can be triggered by sending a malicious IRP.

Recommendations For SoftPerfect RAM Disk version 4.1, consider disabling the spvve.sys driver as a temporary workaround until a patch is available. Restrict access to the filesystem to minimize the risk of exploitation. Avoid using the vulnerable driver until the issue is resolved.