PT-2020-5924 · Unknown · Secret Net Studio

Published 2020-06-19 · Updated 2020-06-19

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Secret Net Studio (affected versions not specified)

Description: The issue is related to the implementation of the interface protection mechanism at the driver level of the Secret Net Studio information protection system. It involves the return of a pointer beyond the expected range. Exploitation of this issue could allow an attacker to cause a denial of service using a specially crafted request.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-466

Related Identifiers

BDU:2021-02036

Affected Products

Secret Net Studio

References · 2

• https://bdu.fstec.ru/vul/2021-02036 · Security Note
• https://securitycode.ru/company/news/kod-bezopasnosti-predstavlyaet-secret-net-studio-8-6-c-kontrolem-administrativnykh-privilegiy · Note