PT-2020-15581 · Drivergenius · Drivergenius

Published 2020-12-03 · Updated 2021-07-21 · CVE-2020-23740

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DriverGenius version 9.61.5480.28

Description The issue is a local privilege escalation vulnerability in the driver wizard of DriverGenius. Attackers can exploit this by using specially constructed programs to increase user privileges.

Recommendations For DriverGenius version 9.61.5480.28, consider disabling the driver wizard feature until a patch is available to prevent potential exploitation.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2020-23740

Affected Products

Drivergenius

References · 7

• 🔥❌ https://github.com/y5s5k5/CVE-2020-23740 · Exploit, Deleted
• 🔥❌ https://github.com/y5s5k5/POCtemp8 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2020-23740 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-23740 · Security Note
• https://cnvd.org.cn/flaw/show/2438470 · Note
• http://drivergenius.com · Note
• https://t.me/cibsecurity/17128 · Telegram Post