CVE-2018-20404

Published: Dec 26, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

ETK_E900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary (uncontrollable) address, resulting in an eternal hang or a BSoD.

Affected (1)

Products: Viatech: Epia E900 Firmware

1 product

Epia E900 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Viatech Epia E900 Firmware	All versions

Running on/with	Platform Versions
Viatech Epia E900	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://downwithup.github.io/CVEPosts.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://downwithup.github.io/CVEPosts.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.