PT-2024-22816 · Unknown · Cg6Kwin2K.Sys

Takahiro Haruyama · Published 2024-03-24 · Updated 2024-11-07 · CVE-2024-29216

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions cg6kwin2k.sys versions prior to 2.1.7.0

Description The issue is related to an exposed IOCTL with insufficient access control in the cg6kwin2k.sys driver. This allows a user without administrator privileges to send a specific IOCTL request and perform I/O to arbitrary hardware ports or physical addresses, potentially resulting in the erasure or alteration of firmware.

Recommendations For versions prior to 2.1.7.0, update to version 2.1.7.0 or later to secure the system. As a temporary workaround, consider restricting access to the IOCTL handler to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2024-29216

Affected Products

Cg6Kwin2K.Sys

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-29216 · Security Note
• https://twitter.com/oktsec/status/1773213875107668087 · Twitter Post
• https://sangomakb.atlassian.net/wiki/spaces/DVC/pages/45351279/Natural+Access+Software+Download · Note
• https://jvn.jp/en/vu/JVNVU90671953 · Note
• https://twitter.com/CVEnew/status/1772146482805969191 · Twitter Post