CVE-2018-8044
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
The vulnerability in K7Antivirus Premium 15.1.0.53 is caused by incorrect access control in the K7Sentry.sys driver. It allows a local attacker to execute a process with elevated privileges.
Risk Assessment
The risk involves potential privilege escalation by a local user, which could lead to system compromise or malware execution.
Recommendation
It is recommended to immediately update K7Antivirus Premium to the latest version that fixes this vulnerability. Also, restrict local system access to trusted users only.
Other vulnerabilities in K7Sentry.sys
See all- CVE-2014-9643High
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before version 14.2.0.253 allows local users to write to arbitrary memory locations, potentially gaining privileges.
- CVE-2017-17700Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with value 0x950025a4.
- CVE-2017-17699Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with the value 0x950025ac.
- CVE-2017-17465Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with code 0x95002574.
- CVE-2017-17464Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows NULL pointer dereference via a DeviceIoControl request with code 0x95002570.
Original NVD description (English source)
K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process Execution (local). The component is: K7Sentry.sys.