PT-2020-14934 · Msi · Msi Ambientlink Msio64

Published 2020-09-24 · Updated 2020-10-09 · CVE-2020-17382

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MSI AmbientLink MsIo64 driver version 1.0.0.8

Description The issue concerns a buffer overflow in the MSI AmbientLink MsIo64 driver. There is information about kernel exploitation related to this driver.

Recommendations For MSI AmbientLink MsIo64 driver version 1.0.0.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-17382

Affected Products

Msi Ambientlink Msio64

References · 13

• 🔥 https://github.com/uf0o/CVE-2020-17382 · Exploit
• 🔥 https://us.msi.com/support/download/vga · Exploit
• 🔥 http://packetstormsecurity.com/files/159315/MSI-Ambient-Link-Driver-1.0.0.8-Privilege-Escalation.html · Exploit
• 🔥❌ https://github.com/Exploitables/CVE-2020-17382 · Exploit, Deleted
• 🔥 https://coresecurity.com/core-labs/advisories/msi-ambient-link-multiple-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/48836 · Exploit
• 🔥❌ https://github.com/expFlash/CVE-2020-17382 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2020-17382 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-17382 · Security Note
• https://t.me/defcon_news/57974 · Telegram Post
• https://t.me/rnetsec/13434 · Telegram Post
• https://t.me/ckure/5650 · Telegram Post
• https://t.me/cybersecuritytechnologies/1807 · Telegram Post