ID de Prueba:	1.3.6.1.4.1.25623.1.0.107806
Categoría:	Privilege escalation
Título:	AIDA64 < 5.99.4900 Code Execution and Privilege Escalation Vulnerability
Resumen:	AIDA64 is prone to a code execution and privilege escalation vulnerability.
Descripción:	Summary: AIDA64 is prone to a code execution and privilege escalation vulnerability. Vulnerability Insight: kerneld.sys, part of the AIDA64 software package, exposes the wrmsr instruction to user-mode callers without properly validating the target Model Specific Register (MSR). Vulnerability Impact: The vulnerability can result in arbitrary unsigned code being executed in Ring 0. Note: The driver must be loaded or attacker will require admin rights. Newer versions require admin callers. Affected Software/OS: AIDA64 Editions prior to version 5.99.4900. Solution: Update AIDA64 to version 5.99.4900 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-7244 https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0010/FEYE-2019-0010.md
Copyright	Copyright (C) 2020 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.