high7.8Public exploit code
CVE-2018-10809
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other imp…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 2345 Security Guard 3.7 - '2345NetFirewall.sys' Denial of Service2018-05-08 · dos · windows_x86
Impact
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-8873.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 2345 Security Guard Project | 2345 Security Guard | Version 3.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/147538/2345-Security-Guard-3.7-Denial-Of-Service.html
- https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345NetFirewall.sys-0x00222040
- https://www.exploit-db.com/exploits/44600/
- http://packetstormsecurity.com/files/147538/2345-Security-Guard-3.7-Denial-Of-Service.html
- https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345NetFirewall.sys-0x00222040
- https://www.exploit-db.com/exploits/44600/