What is the severity of CVE-2017-17429?

CVE-2017-17429 has a high severity level due to its potential to allow local users to access raw hard disk data without proper authentication.

How do I fix CVE-2017-17429?

To fix CVE-2017-17429, users should update K7 Antivirus Premium to version 15.1.0.53 or later.

What software versions are affected by CVE-2017-17429?

CVE-2017-17429 affects K7 Antivirus Premium versions prior to 15.1.0.53 and other K7 products with similar version limitations.

Is CVE-2017-17429 a local or remote vulnerability?

CVE-2017-17429 is a local vulnerability that requires physical access to the affected machine.

What kind of attack can exploit CVE-2017-17429?

An attacker can exploit CVE-2017-17429 by sending a specific IOCTL to gain unauthorized access to raw hard disk data.

Vulnerability/
CVE-2017-17429

medium

5.5

CWE

16/1/2018

3/10/2019

CVE-2017-17429: Input Validation

First published: Tue Jan 16 2018(Updated: )

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
K7 Computing AntiVirus	<15.1.0.53
K7 Computing AntiVirus	<15.1.0308
k7computing endpoint	<14.2.0137
K7 Computing Internet Security	<15.1.0297
K7 Computing Total Security	<15.1.0324
K7 Computing Total Security	<16.0.0131
K7 Ultimate Security	<15.1.0324

Never miss a vulnerability like this again

Reference Links

https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017

Frequently Asked Questions

What is the severity of CVE-2017-17429?
CVE-2017-17429 has a high severity level due to its potential to allow local users to access raw hard disk data without proper authentication.
How do I fix CVE-2017-17429?
To fix CVE-2017-17429, users should update K7 Antivirus Premium to version 15.1.0.53 or later.
What software versions are affected by CVE-2017-17429?
CVE-2017-17429 affects K7 Antivirus Premium versions prior to 15.1.0.53 and other K7 products with similar version limitations.
Is CVE-2017-17429 a local or remote vulnerability?
CVE-2017-17429 is a local vulnerability that requires physical access to the affected machine.
What kind of attack can exploit CVE-2017-17429?
An attacker can exploit CVE-2017-17429 by sending a specific IOCTL to gain unauthorized access to raw hard disk data.

agent/type
agent/last-modified-date
agent/first-publish-date
agent/weakness
agent/severity
agent/author
agent/references
agent/softwarecombine
agent/description
agent/tags
agent/event
collector/nvd-index
agent/software-canonical-lookup-request
vendor/k7computing
canonical/k7 computing antivirus
canonical/k7computing endpoint
canonical/k7 computing internet security
canonical/k7 computing total security
canonical/k7 ultimate security

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.