CVE-2024-12653: falha de média gravidade em FabulaTech USB over Network
FabulaTech USB over Network IOCT ftusbbus2.sys 0x22040C null pointer dereference
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.4%
A vulnerability classified as problematic has been found in FabulaTech USB over Network 6.0.6.1. Affected is the function 0x22040C in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
FabulaTech · USB over NetworkCVEs relacionadas — FabulaTech USB over Network
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12655MEDIUMFabulaTech USB over Network IOCT ftusbbus2.sys 0x220420 null pointer dereferenceEPSS 0.5%CVE-2024-12654MEDIUMFabulaTech USB over Network IOCT ftusbbus2.sys 0x220408 null pointer dereferenceEPSS 0.3%CVE-2024-12656MEDIUMFabulaTech USB over Network IOCT ftusbbus2.sys 0x220448 null pointer dereferenceEPSS 0.3%