« Volver al listado

CVE-2024-2760

Estado: AplazadaMedia (5.5)—

Bkav Home v7816, build 2403161130 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x222240 IOCTL code of the BkavSDFlt.sys driver.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Bkav — HomeAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-2760",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-2760",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-23T15:04:50.423778Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "help@fluidattacks.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "help@fluidattacks.com",
      "affectedData": [
        {
          "vendor": "Bkav Corporation",
          "product": "Bkav Home",
          "versions": [
            {
              "status": "affected",
              "version": "v7816, build 2403161130"
            }
          ],
          "platforms": [
            "Windows"
          ],
          "defaultStatus": "unknown"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:bkav:bkav_home:-:*:*:*:*:*:*:*"
          ],
          "vendor": "bkav",
          "product": "bkav_home",
          "versions": [
            {
              "status": "affected",
              "version": "7816"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-04-23T04:15:08.717",
  "references": [
    {
      "url": "https://fluidattacks.com/advisories/kent/",
      "source": "help@fluidattacks.com"
    },
    {
      "url": "https://www.bkav.com/bkav-home",
      "source": "help@fluidattacks.com"
    },
    {
      "url": "https://fluidattacks.com/advisories/kent/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.bkav.com/bkav-home",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "help@fluidattacks.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-404"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Bkav Home v7816, build 2403161130 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x222240 IOCTL code of the BkavSDFlt.sys driver."
    },
    {
      "lang": "es",
      "value": "Bkav Home v7816, compilación 2403161130 es afectado por una vulnerabilidad de fuga de información de memoria al activar el código IOCTL 0x222240 del controlador BkavSDFlt.sys."
    }
  ],
  "lastModified": "2026-06-17T07:25:29.520",
  "sourceIdentifier": "help@fluidattacks.com"
}