Vulnerability Report

CVE-2017-14344

RCE

Title: Jungo Windriver RCE

RCE

Proof Of Concept

PoC Available for CVE-2017-14344

CWE Category CWE-20

Published Date Sep 12, 2017

Modified Date Jun 17, 2026

Exploit Status Available

Score 7.8 CVSS v3.0

Exploit Probability (EPSS)

1.83%

Vulnerability Summary

CVE-2017-14344: This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel.

Impacted Vendors

jungo 1

Reference Links

http://srcincite.io/advisories/src-2017-0027/ https://www.exploit-db.com/exploits/42665/ http://srcincite.io/advisories/src-2017-0027/ https://www.exploit-db.com/exploits/42665/

CVSS v3.0

Source Entity [email protected]

Severity HIGH

7.8

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.2

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:L/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns