CVE-2019-7244

High

Description

An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x80112084 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

SeverityHigh
CVSS7.2
Exploit probability—
ProductAida64
PublishedMar 25, 2020
First seenMar 25, 2020

How to fix

Update
  • aida64 aida645.99 or later

Affected products

ProductAffected versionsFixed in
aida64 aida64v < 5.995.99

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2019-7244 · Aida64 · Dark Radar