6.4
CVE-2024-8159
- EPSS 0.15%
- Veröffentlicht 03.10.2024 06:15:10
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle help@fluidattacks.com
- CVE-Watchlists
- Unerledigt
Deep Freeze 9.00.020.5760 - Out-of-bounds read
Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerFaronics
≫
Produkt
DeepFreeze
Default Statusunknown
Version
9.00.020.5760
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.046 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| help@fluidattacks.com | 6.4 | 1.1 | 4.7 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:L
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://fluidattacks.com/advisories/kanka/
https://www.faronics.com/products/deep-freeze