PT-2018-2907 · Unknown · Secret Net Studio+1

Published 2018-07-03 · Updated 2018-07-03

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Secret Net Studio (affected versions not specified)

Description The issue is related to a potential bypass in the Secret Net Studio system, where an attacker can directly access the driver by sending an IOCTL request, thus bypassing the Sn5CryptoApi.dll library. This could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-201

Related Identifiers

BDU:2019-02596

Affected Products

Secret Net Studio

Sn5Cryptoapi.Dll

References · 1

• https://bdu.fstec.ru/vul/2019-02596 · Security Note