CVE-2017-17429
MEDIUMK7 Antivirus Premium < 15.1.0.53 - Unauthenticated Raw Disk Access via K7Sentry IOCTL
Title source: llmDescription
In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017
Scores
CVSS v3
5.5
EPSS
0.0029
EPSS Percentile
20.9%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-20
Status
published
Products (7)
k7computing/antivirus
< 15.1.0.53
k7computing/antivirus
< 15.1.0308
k7computing/endpoint
< 14.2.0137
k7computing/internet_security
< 15.1.0297
k7computing/total_security
< 15.1.0324
k7computing/total_security
< 16.0.0131
k7computing/ultimate_security
< 15.1.0324
Published
Jan 16, 2018
Tracked Since
Feb 18, 2026