Lucene search
HistoryDec 12, 2014 - 3:59 p.m.
CVE-2014-7136
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
32.2%
Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver) before 14.0.1.16, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call.
Affected configurations
Node
k7computingk7firewall_packet_driverRange≤14.0.1.15
| Vendor | Product | Version | CPE |
|---|---|---|---|
| k7computing | k7firewall_packet_driver | * | cpe:2.3:a:k7computing:k7firewall_packet_driver:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-7136
2014-12-12 15:00:00
cve
cve
CVE-2014-7136
2014-12-12 15:59:07
openvas
openvas
K7Firewall Packet Driver Privilege Escalation Vulnerability
2016-11-07 00:00:00
prion
prion
Heap overflow
2014-12-12 15:59:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
32.2%
Related for NVD:CVE-2014-7136