PT-2021-10723 · Unknown · Superantispyware

Hfiref0X · Published 2021-12-28 · Updated 2022-01-12 · CVE-2020-22061

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SUPERAntispyware version 8.0.0.1050

Description The issue in the saskutil64.sys component allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140.

Recommendations For SUPERAntispyware version 8.0.0.1050, consider disabling the saskutil64.sys component until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2020-22061

Affected Products

Superantispyware

References · 3

• 🔥 https://gist.github.com/hfiref0x/7e66d943984cceac60eb812ac1bf8208 · Exploit
• https://osv.dev/vulnerability/CVE-2020-22061 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-22061 · Security Note