VulnerabilityModified
CVE-2018-5701
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
CRITICAL 9.8EPSS 18.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 18.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
- CVSS 3.0
- 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 18.45% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- iolo/system shield
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/43929/Third Party Advisory, VDB Entry
- https://www.greyhathacker.net/?p=1006Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/43929/Third Party Advisory, VDB Entry
- https://www.greyhathacker.net/?p=1006Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.