CVE-2020-11519

HIGH

WinMagic SecureDoc <8.5 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-11519. PoCs published by patois.

AI-analyzed exploit summary The repository contains a detailed technical write-up on CVE-2020-11519, a local privilege escalation vulnerability in Winmagic SecureDoc's SDDisk2k.sys driver. The vulnerability arises from unsafe device object creation and improper handling of user-mode input, allowing arbitrary disk sector read/write operations.

Description

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \\.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution.

Exploits (1)

nomisec WRITEUP 12 stars
by patois · poc
https://github.com/patois/winmagic_sd

The repository contains a detailed technical write-up on CVE-2020-11519, a local privilege escalation vulnerability in Winmagic SecureDoc's SDDisk2k.sys driver. The vulnerability arises from unsafe device object creation and improper handling of user-mode input, allowing arbitrary disk sector read/write operations.

Classification
Writeup 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: Winmagic SecureDoc versions 8.3, 8.5, and 8.5SR2
Auth required
Prerequisites: Local access to a vulnerable system · Authenticated user account
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References

Scores

CVSS v3 7.8
EPSS 0.0081
EPSS Percentile 52.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
winmagic/securedoc < 8.5
Published Jun 22, 2020
Tracked Since Feb 18, 2026