Description (CNA)
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Paragon Software / Migrate OS to SSD | affected 4 through 5 |
| Paragon Software / Disk Wiper | affected 15 through 16 |
| Paragon Software / Drive Copy | affected 15 through 16 |
| Paragon Software / Hard Disk Manager | affected 15 through 17.39 |
| Paragon Software / Backup and Recovery | affected 15 through 17.39 |
| Paragon Software / Partition Manager | affected 15 through 17.39 |
CWE
No CWE identifiers supplied.
References
- https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys
- https://www.kb.cert.org/vuls/id/726882
- https://www.paragon-software.com/support/#patches
ADP enrichment
No English description supplied.
No references supplied.