PT-2015-5338 · Softsphere · Softsphere Defensewall Personal Firewall

Parvez Anwar + 1 · Publicado 2015-02-19 · Atualizado 2015-02-21 · CVE-2015-1515

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SoftSphere DefenseWall Personal Firewall version 3.24

Description The issue allows local users to gain privileges by writing data to arbitrary memory locations via a crafted IOCTL call, specifically 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010.

Recommendations For SoftSphere DefenseWall Personal Firewall version 3.24, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1515

Produtos afetados

Softsphere Defensewall Personal Firewall

Referências · 4

• 🔥 https://exploit-db.com/exploits/36052 · Exploit
• 🔥 http://exploit-db.com/exploits/36052 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1515 · Nota de Segurança
• http://osvdb.org/117996 · Nota