PT-2018-10109
CVE-2018-10796
·
Published
2018-05-07
·
Updated
2018-06-13
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
2345 Security Guard version 3.7
Description
The issue allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact. This is due to the driver file (2345NetFirewall.sys) not validating input values from IOCtl 0x00222014.
Recommendations
For version 3.7, consider updating the driver file to a version that properly validates input values from IOCtl 0x00222014 to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾