CVE-2024-26507
High
Description
An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit through 7.00.6742 allows a local attacker to escalate privileges via the DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages components.
SeverityHigh
CVSS7.8
Exploit probability—
ProductFinalwire Aida64 Engineer
PublishedJun 10, 2024
First seenJun 10, 2024
Weakness typeCWE-1286CWE-1286
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| finalwire aida64_engineer | v ≤ 7.00.6700 | — |
| finalwire aida64_business | v ≤ 7.00.6700 | — |
| finalwire aida64_network_audit | v ≤ 7.00.6700 | — |
| finalwire airda_extreme | v ≤ 7.00.6700 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.