CVE-2020-12138

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM privileges via a DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages.

CVSS v3 8.8 HIGH
CVSS v2.0 9.0 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://eclypsium.com/2019/11/12/mother-of-all-drivers/	Third Party Advisory
https://h0mbre.github.io/atillk64_exploit/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:amd:atillk64:5.11.9.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-04-27 15:15

Updated : 2023-12-10 13:27

NVD link : CVE-2020-12138

Mitre link : CVE-2020-12138

CVE.ORG link : CVE-2020-12138

JSON object : View

Products Affected

amd

atillk64

CWE

CWE-862

Missing Authorization

{"id": "CVE-2020-12138", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2020-04-27T15:15:12.750", "references": [{"url": "https://eclypsium.com/2019/11/12/mother-of-all-drivers/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://h0mbre.github.io/atillk64_exploit/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\\SYSTEM privileges via a DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages."}, {"lang": "es", "value": "AMD ATI atillk64.sys versi\u00f3n 5.11.9.0, permite a usuarios poco privilegiados interactuar directamente con la memoria f\u00edsica al llamar a una de las varias rutinas de controladores que asignan la memoria f\u00edsica al espacio de direcciones virtuales del proceso de llamada. Esto podr\u00eda permitir a usuarios pocos privilegiados alcanzar los privilegios NT AUTHORITY\\SYSTEM por medio de una llamada de DeviceIoControl asociada con MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, o MmMapLockedPages."}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:amd:atillk64:5.11.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "089697C9-3FB7-4BE3-A9E0-F380DBD56D78"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}