Description (CNA)
Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOCTL request, a user without the administrator privilege may perform I/O to arbitrary hardware port or physical address, resulting in erasing or altering the firmware.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sangoma Technologies / cg6kwin2k.sys | affected prior to 2.1.7.0 |
CWE
No CWE identifiers supplied.
References
- https://sangomakb.atlassian.net/wiki/spaces/DVC/pages/45351279/Natural+Access+Software+Download
- https://jvn.jp/en/vu/JVNVU90671953/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.