PT-2015-5338 · Softsphere · Softsphere Defensewall Personal Firewall

Parvez Anwar + 1 · Published 2015-02-19 · Updated 2015-02-21 · CVE-2015-1515

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SoftSphere DefenseWall Personal Firewall version 3.24

Description The issue allows local users to gain privileges by writing data to arbitrary memory locations via a crafted IOCTL call, specifically 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010.

Recommendations For SoftSphere DefenseWall Personal Firewall version 3.24, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-1515

Affected Products

Softsphere Defensewall Personal Firewall

References · 4

• 🔥 https://exploit-db.com/exploits/36052 · Exploit
• 🔥 http://exploit-db.com/exploits/36052 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1515 · Security Note
• http://osvdb.org/117996 · Note