Lucene search
HistoryDec 12, 2014 - 3:59 p.m.
CVE-2014-7136
cve-2014-7136
k7fwfilt.sys
k7firewall
buffer overflow
kernel mode driver
nvd
security vulnerability
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.4%
Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver) before 14.0.1.16, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call.
Affected configurations
Node
k7computingk7firewall_packet_driverRange≤14.0.1.15
| CPE | Name | Operator | Version |
|---|---|---|---|
| k7computing:k7firewall_packet_driver | k7computing k7firewall packet driver | le | 14.0.1.15 |
Related
nvd
nvd
CVE-2014-7136
2014-12-12 15:59:07
openvas
openvas
K7Firewall Packet Driver Privilege Escalation Vulnerability
2016-11-07 00:00:00
cvelist
cvelist
CVE-2014-7136
2014-12-12 15:00:00
prion
prion
Heap overflow
2014-12-12 15:59:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.4%
Related for CVE-2014-7136