Vulnerability in Realdefen Superantispyware
CVE-2024-0788
SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H.
EPSS exploit prediction
EPSS: 0.002 (13.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 14th percentile — 13.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Realdefen Superantispyware — versions 10.0.1260
- Superantispyware Pro X — versions 10.0.1260
Weakness classification (CWE)
References
- fluidattacks.com/advisories/brubeck/ (Third Party Advisory, third-party-advisory)
- www.superantispyware.com/professional-x-edition.html (Product, product)
Frequently asked questions
- What is CVE-2024-0788?
- CVE-2024-0788 is a medium-severity vulnerability in Realdefen Superantispyware, classified under Improper Neutralization of Directives in Statically Saved Code (Static Code Injection). CVSS score: 6.6/10. Published 2024-01-29.
- How severe is CVE-2024-0788?
- Medium severity. CVSS v3 base score is 6.6 out of 10.