CVE-2020-13523

Name of the Vulnerable Software and Affected Versions SoftPerfect RAM Disk version 4.1

Description An exploitable information disclosure issue exists in the spvve.sys driver. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this issue.

Recommendations For SoftPerfect RAM Disk version 4.1, consider disabling the spvve.sys driver as a temporary workaround until a patch is available. Restrict access to the driver to minimize the risk of exploitation. Avoid using the driver in sensitive environments until the issue is resolved.