Vulnerability Details : CVE-2015-6923
Potential exploit
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.
Products affected by CVE-2015-6923
- cpe:2.3:a:vboxcomm:satellite_express_protocol:2.3.17.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-6923
1.37%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 78 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-6923
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
References for CVE-2015-6923
-
http://seclists.org/fulldisclosure/2015/Sep/72
Full Disclosure: KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege EscalationExploit
-
https://www.korelogic.com/Resources/Advisories/KL-001-2015-005.txt
Exploit
-
https://www.exploit-db.com/exploits/38225/
VBox Satellite Express 2.3.17.3 - Arbitrary WriteExploit
-
http://packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html
VBox Satellite Express Arbitrary Write Privilege Escalation ≈ Packet Storm
-
http://www.securityfocus.com/archive/1/536491/100/0/threaded
SecurityFocus
Jump to