CVE-2020-10234
Last modified
CVE-2020-10234 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. If the user provides a NULL entry for the dwIoControlCode parameter, a kernel panic (aka BSOD) follows. EPSS estimates a 3.77% chance of exploitation in the next 30 days.
Description
The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. If the user provides a NULL entry for the dwIoControlCode parameter, a kernel panic (aka BSOD) follows. The IOCTL codes can be found in the dispatch function: 0x8001E000, 0x8001E004, 0x8001E008, 0x8001E00C, 0x8001E010, 0x8001E014, 0x8001E020, 0x8001E024, 0x8001E040, 0x8001E044, and 0x8001E048. \DosDevices\AscRegistryFilter and \Device\AscRegistryFilter are affected.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Iobit | Advanced Systemcare | 13.2 |
References
- https://github.com/FULLSHADE/Kernel-exploitsThird Party Advisory
- https://github.com/FULLSHADE/Kernel-exploits/tree/master/AscRegistryFilter.sysExploit, Third Party Advisory
- https://www.iobit.com/en/advancedsystemcarefree.phpProduct, Vendor Advisory
- https://github.com/FULLSHADE/Kernel-exploitsThird Party Advisory
- https://github.com/FULLSHADE/Kernel-exploits/tree/master/AscRegistryFilter.sysExploit, Third Party Advisory
- https://www.iobit.com/en/advancedsystemcarefree.phpProduct, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-10234?
How severe is CVE-2020-10234?
How do I fix CVE-2020-10234?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-10229A CSRF issue in vtecrm vtenext 19 CE allows attackers to car…8.8
- CVE-2020-1023A remote code execution vulnerability exists in Microsoft Sh…8.8
- CVE-2020-10230CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6…9.8
- CVE-2020-10231TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.…7.5
- CVE-2020-10232In version 4.8.0 and earlier of The Sleuth Kit (TSK), there …9.8
- CVE-2020-10233In version 4.8.0 and earlier of The Sleuth Kit (TSK), there …9.1
- CVE-2020-10235An issue was discovered in Froxlor before 0.10.14. Remote at…8.8
- CVE-2020-10236An issue was discovered in Froxlor before 0.10.14. It create…6.1
- CVE-2020-10237An issue was discovered in Froxlor through 0.10.15. The inst…5.5
- CVE-2020-10238An issue was discovered in Joomla! before 3.9.16. Various ac…7.5
- CVE-2020-10239An issue was discovered in Joomla! before 3.9.16. Incorrect …8.8
- CVE-2020-1024A remote code execution vulnerability exists in Microsoft Sh…8.8
Are you affected by CVE-2020-10234?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
