CVE-2018-20404

ETK_E900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary (uncontrollable) address, resulting in an eternal hang or a BSoD.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-12-26

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Epia-e900 Firmware (Viatech)

References

• https://downwithup.github.io/CVEPosts.html