Fallos del tipo CWE-782

40 resultados

IOCTL exposto com controle de acesso insuficiente

Ocorre quando um driver ou componente do kernel expõe uma operação IOCTL (interface de controle de dispositivo) sem validar adequadamente as permissões do processo que a chama. Um usuário sem privilégios pode executar operações administrativas ou acessar dados sensíveis que deveriam estar restritos, comprometendo a integridade do sistema.

Ejemplo

Um driver de hardware permite que qualquer processo no sistema chame um IOCTL para resetar configurações críticas ou ler registros de segurança sem verificar se o chamador é root ou pertence a um grupo autorizado. Um usuário comum consegue invocar essa operação e desabilitar proteções ou vazar informações do kernel.

Cómo mitigar

Sempre validar o UID/GID do processo chamador e o contexto de segurança (capabilities do Linux, ACLs, etc.) antes de executar qualquer IOCTL. Implementar uma lista explícita de operações permitidas por nível de privilégio e rejeitar tudo que não estiver na whitelist. Usar ferramentas como `cap_has_capability()` no kernel para verificar permissões específicas.

CVE-2021-21551HIGHDell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of serviEPSS 53.1%KEVCVE-2025-7771HIGHCode Execution / Escalation of Privileges in ThrottleStopEPSS 6.8%CVE-2024-32370CRITICALAn issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafteEPSS 1.0%CVE-2024-30804CRITICALAn issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via craftEPSS 0.8%CVE-2024-39251CRITICALAn issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitiveEPSS 0.7%CVE-2024-33220HIGHAn issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and executeEPSS 0.7%CVE-2026-36355HIGHThe rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access controEPSS 0.7%CVE-2024-4196CRITICALAvaya IP Office Web Control RCE VulnerabilityEPSS 0.6%CVE-2024-0141MEDIUMNVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level GPU access to writeEPSS 0.5%CVE-2025-26125HIGHAn exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate priEPSS 0.5%CVE-2023-35841HIGHWinFlash Driver Permissions IssueEPSS 0.4%CVE-2025-8061HIGHA potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some LenoEPSS 0.4%CVE-2021-21792MEDIUMAn information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O reEPSS 0.3%CVE-2021-21787HIGHA privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write reqEPSS 0.3%CVE-2021-21790MEDIUMAn information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O reEPSS 0.3%CVE-2021-21791MEDIUMAn information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O reEPSS 0.3%CVE-2021-21785MEDIUMAn information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A speciallEPSS 0.3%CVE-2021-21788HIGHA privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write reqEPSS 0.3%CVE-2021-21789HIGHA privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write reqEPSS 0.3%CVE-2026-4483HIGHAn exposed IOCTL with an  insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial xEPSS 0.3%