CVE-2020-17382 : The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x8

The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).

Published 2020-10-02 09:15:14

Updated 2020-10-09 13:37:20

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowMemory Corruption

Products affected by CVE-2020-17382

MSI » Ambientlink Mslo64 Firmware » Version: 1.0.0.8
cpe:2.3:o:msi:ambientlink_mslo64_firmware:1.0.0.8:*:*:*:*:*:*:*
Matching versions
When used together with: MSI » Ambientlink Mslo64 » Version: N/A

EPSS FAQ

0.19%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 57 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

https://www.coresecurity.com/core-labs/advisories/msi-ambient-link-multiple-vulnerabilities

MSI Ambient Link Multiple Vulnerabilities | CoreLabs Advisories
Exploit
http://packetstormsecurity.com/files/159315/MSI-Ambient-Link-Driver-1.0.0.8-Privilege-Escalation.html

MSI Ambient Link Driver 1.0.0.8 Privilege Escalation ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry
https://us.msi.com/support/download/vga

Support Center | MSI USA
Exploit;Vendor Advisory

Jump to