Strix
26.1K

CVE-2008-5121

UnknownEPSS 1.13%

Last modified

CVE-2008-5121 is a vulnerability of currently unknown severity. dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface.. EPSS estimates a 1.13% chance of exploitation in the next 30 days.

Description

dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface.

Metrics

EPSS Probability
1.13%

62.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CitrixDeterministic Network Enhancer2.21.7.223
CitrixDeterministic Network Enhancer3.21.7.17464

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2008-5121?
dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface.
How severe is CVE-2008-5121?
Severity scoring for CVE-2008-5121 is pending analysis. The EPSS model estimates a 1.13% probability of exploitation in the next 30 days.
How do I fix CVE-2008-5121?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2008-5121?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST