medium6.1
CVE-2024-29216
Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0.
Impact
Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOCTL request, a user without the administrator privilege may perform I/O to arbitrary hardware port or physical address, resulting in erasing or altering the firmware.
Affected products
| Product | Affected versions |
|---|---|
| Cg6kwin2k.Sys | before 2.1.7.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.