Unscored severity · published Jan 9, 2008
CVE-2007-5761
The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device interface (nantsys.sys), which allows local users to gain…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device interface (nantsys.sys), which allows local users to gain privileges or cause a denial of service (system crash), as demonstrated by modifying the SYSENTER_EIP_MSR CPU Model Specific Register (MSR) value.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netoctopus · Motorola
5.1.2_build_1011 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5761
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5761
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=636
Patch
http://secunia.com/advisories/28366
securitytracker.com
http://securitytracker.com/id?1019161
Patch
http://www.netopia.com/support/software/technotes/netoctopus/Removing_the_nantsys_Driver.pdf
Patch
http://www.securityfocus.com/bid/27175
www.vupen.com
http://www.vupen.com/english/advisories/2008/0062