CVE-2017-17429

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2018-01-16

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Antivirus (K7computing)
• Endpoint (K7computing)
• Internet Security (K7computing)
• Total Security (K7computing)
• Ultimate Security (K7computing)

References

• https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017