PT-2020-13599 · Softperfect · Softperfect Ram Disk

Published 2020-08-04 · Updated 2022-06-07 · CVE-2020-13522

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SoftPerfect RAM Disk version 4.1

Description An arbitrary file delete issue exists due to a specially crafted I/O request packet (IRP) that can be sent by an attacker, allowing an unprivileged user to delete any file on the filesystem. This can be triggered by sending a malicious IRP.

Recommendations For SoftPerfect RAM Disk version 4.1, consider disabling the spvve.sys driver as a temporary workaround until a patch is available. Restrict access to the filesystem to minimize the risk of exploitation. Avoid using the vulnerable driver until the issue is resolved.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-13522

Affected Products

Softperfect Ram Disk

References · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1121 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-13522 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13522 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/1533 · Telegram Post
• https://t.me/cibsecurity/13876 · Telegram Post