PT-2024-26867 · Unknown · Marvin Test Hw.Exe

Published 2024-05-26 · Updated 2024-08-19 · CVE-2024-36054

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Marvin Test HW.exe versions prior to 5.0.5.0

Description The issue allows unprivileged user-mode processes to arbitrarily read kernel memory, and consequently gain all privileges, via specific IOCTL commands. The affected IOCTL commands are 0x9c4064b8, which uses MmMapIoSpace, and 0x9c406490, which uses ZwMapViewOfSection.

Recommendations For versions prior to 5.0.5.0, update to version 5.0.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the IOCTL commands 0x9c4064b8 and 0x9c406490 to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2024-36054

Affected Products

Marvin Test Hw.Exe

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-36054 · Security Note
• https://marvintest.com/Downloads.aspx?prodId=12&search=package · Note
• https://t.me/cvenotify/91181 · Telegram Post
• https://t.me/cvenotify/81049 · Telegram Post
• https://marvintest.com/KnowledgeBase/KBArticle.aspx?ID=362 · Note