CVE-2019-7244 Privilege escalation in n/a
AIDA64 driver allows arbitrary MSR writes via IOCTL, enabling local attackers to execute code in Ring-0 and escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-7244?
CVE-2019-7244 is a high-severity vulnerability in n/a, published on 25 Mar 2020. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x80112084 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Weakness: CWE-665
Which versions are affected by CVE-2019-7244?
It affects 1 product.
Products include Aida64 Aida64.
How do I fix CVE-2019-7244?
No fix has been published for CVE-2019-7244 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-7244 being exploited?
There is no known exploitation of CVE-2019-7244 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2019-25629 AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging
- CVE-2019-25631 AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter
- CVE-2019-25633 AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via EggHunter
- CVE-2019-25360 Aida64 6.10.5200 - Buffer Overflow
- CVE-2020-19513 Memory corruption in n/a
Sources
Also known as GHSA-p6m5-f3v3-8jmp.