Vulnerability Spotlight: Two vulnerabilities in SoftPerfect RAM Disk

guest · Aug 7, 2020

Vulnerability Spotlight: Two vulnerabilities in SoftPerfect RAM Disk
August 4, 2020
https://blog.talosintelligence.com/2020/08/softperfect-file-deletion-vuln-spotlight-aug-2020.html

Cisco Talos researchers recently discovered that a specific driver in the SoftPerfect RAM disk could allow an adversary to delete files on an arbitrary basis and disclose sensitive information.

SoftPerfect RAM Disk is a high-performance RAM disk application that allows the user to store a disk from their computer on the device’s space. An attacker could exploit TALOS-2020-1121 to point to a specific filepath and then delete that file. The other vulnerability could lead to the disclosure of sensitive information.
Click to expand...

Vulnerability details
SoftPerfect RAM Disk spvve.sys 0x222004 arbitrary file deletion vulnerability (TALOS-2020-1121/CVE-2020-13522)
Read the complete vulnerability advisory here for additional information.

SoftPerfect RAM Disk spvve.sys 0x222024 information disclosure vulnerability (TALOS-2020-1122/CVE-2020-13523)
An exploitable information disclosure vulnerability exists in SoftPerfect's RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.

Read the complete vulnerability advisory here for additional information.
Click to expand...

Versions tested
Talos tested and confirmed that this vulnerability affects SoftPerfect RAM disk, version 4.1
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Two vulnerabilities in SoftPerfect RAM Disk

guest Guest

Log in or Sign up

Vulnerability Spotlight: Two vulnerabilities in SoftPerfect RAM Disk

guest Guest

Useful Searches