SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2004-2477

DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT found in ntoskrnl.exe.

LOW 2.1EPSS 0.44%

Does this matter?

Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.

Description

DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT found in ntoskrnl.exe.

CVSS 2.0
2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.44% probability · 37th percentile
CISA KEV
Not listed
Affected
diamondcs/process guard free
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.