CVE-2016-8732

Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additional insufficient checks allow any application to turn off some of the protection mechanisms provided by the Invincea product.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.59% chance of exploitation in the next 30 days, 46th percentile

Published

2018-04-24

Updated

2024-09-16

Proof-of-concept exploits (1)

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0246

References

• CVE Record
• NVD entry

Related

• CVE-2016-8727
• CVE-2016-8735
• CVE-2016-8726
• CVE-2016-8740
• CVE-2016-8725
• CVE-2016-8742