CVE-2017-14311 Privilege escalation in n/a
Local attackers can gain elevated privileges by exploiting a vulnerability in the NetDecision Winring0x32.sys driver via a crafted IOCTL call.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-14311?
CVE-2017-14311 is a high-severity vulnerability in n/a, published on 19 Sep 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call.
Which versions are affected by CVE-2017-14311?
It affects 1 product.
Products include Netmechanica Netdecision.
How do I fix CVE-2017-14311?
No fix has been published for CVE-2017-14311 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-14311 being exploited?
There is no known exploitation of CVE-2017-14311 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-pvv8-369h-62fg.