PT-2017-13979 · Cpuid · Cpu-Z

Published 2017-10-16 · Updated 2020-08-24 · CVE-2017-15302

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CPUID CPU-Z versions 1.43 through 1.81

Description The issue concerns improper access rights to a kernel-mode driver, which can lead to information disclosure or elevation of privileges. Any application running on the system, including sandboxed users, can issue an ioctl to this driver without validation, allowing for an arbitrary read of any physical address via ioctl 0x9C402604. This results in an information leak and elevation of privileges (EoP), as the driver can map any physical page on the system and return the allocated map page address to the user.

Recommendations For CPUID CPU-Z versions 1.43 through 1.81, consider restricting access to the kernel-mode driver to minimize the risk of exploitation, as the arbitrary read itself is intentional behavior for ACPI scan functionality, but the lack of an ACL poses a security issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2017-15302

Affected Products

Cpu-Z

References · 3

• 🔥❌ https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15302/README.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2017-15302 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15302 · Vendor Advisory