fluidattacks.comThird-party advisory
https://fluidattacks.com/advisories/ellington CVE-2024-1853
MEDIUMRansomware
Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination
Record summary
CVE-2024-1853 has a selected CVSS score of 5.5 (medium). VulnCheck reports CVE-2024-1853 use in known ransomware campaigns.
Description
Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jul 16, 2024 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
- Ransomware use
- Observed · VulnCheck
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 19, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
AntiLoggerBrowse Zemana / AntiLogger | VulnCheck | Version data not supplied | |
AntiLoggerBrowse Zemena / AntiLoggerDefault status: unknown | CVE List | 2.74.204.664 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-1853 zemana.comproduct
https://zemana.com/us/antilogger.html