CVE-2020-22061

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 28-12-2021 09:15

Last modified: - 12-01-2022 05:54

Total changes: - 2

Description

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

7.8

Base score

1.8

5.9

Exploitability score

Impact score

Verification logic

vendor=superantispyware AND product=superantispyware AND version=8.0.0.1050 AND software_edition=free

vendor=superantispyware AND product=superantispyware AND version=8.0.0.1050 AND software_edition=pro

Reference

https://gist.github.com/hfiref0x/7e66d943984cceac60eb812ac1bf8208

Keywords

CVE-2020-22061

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-22061

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures