CVE-2020-11520

—

CVSS 3.1

7.8 high

EPSS

<1%p35

Published

Jun 22, 2020 (Jun 22, 2020)

Modified

Jun 17, 2026

Description

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution.

Vendors: winmagic
Products: securedoc
Weakness: CWE-119
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.