CVE-2010-1592
EXPLOITED IN THE WILD RANSOMWARESiSoftware Sandra <16.10.2010.1 - Privilege Escalation/DoS
Title source: llmExploitation Summary
CVE-2010-1592 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io), including in ransomware campaigns.
Description
sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service (system crash) via unspecified vectors involving "Model-Specific Registers."
References (4)
Core 4
Core References
Exploit x_refsource_misc
http://www.ntinternals.org/ntiadv0808/ntiadv0808.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/61947
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/38212
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0223
Scores
EPSS
0.0043
EPSS Percentile
34.8%
Details
VulnCheck KEV
2018-03-06
InTheWild.io
2022-05-25
Ransomware Use
Confirmed
CWE
CWE-20
Status
published
Products (1)
sisoftware/sandra
< 16.10.2010.1
Published
Apr 28, 2010
Tracked Since
Feb 18, 2026