📦

lha.sys

Vendor: lg

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 0.54% Exploit Prob.
Latest CVE CVE-2019-8372 Feb 18

Security Vulnerability Index

Page 1 / 1
7.0 CVSS
CVE-2019-8372

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link and an open DACL.

EPSS: 0.54%