7.2high
CVE-2008-57251 exploit
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain priv…
Published 17 y ago · modified 4 mo ago · JSON
CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 58%
Public exploits
1
Exploit-DB
Summary
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.
Exploit prediction (EPSS)
0.85% probability of exploitation in the next 30 days, higher than 58% of all scored CVEs.
Exploits and detections
- EDB-7533 PowerStrip 3.84 - 'pstrip.sys' Local Privilege Escalation · local · 2008-12-21
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
References
- securityfocus.com /bid/32961 · vdb-entry, x_refsource_BID, x_transferred
- secunia.com /advisories/33249 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- ntinternals.org /ntiadv0810/ntiadv0810.html · x_refsource_MISC, x_transferred
- securityreason.com /securityalert/4809 · third-party-advisory, x_refsource_SREASON, x_transferred
- exploit-db.com /exploits/7533 · exploit, x_refsource_EXPLOIT-DB, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/47532 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2008-5725
- NVD: CVE-2008-5725
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.