{"api_version":"1","generated_at":"2026-07-23T13:25:46+00:00","cve":"CVE-2020-11520","urls":{"html":"https://cve.report/CVE-2020-11520","api":"https://cve.report/api/cve/CVE-2020-11520.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-11520","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11520"},"summary":{"title":"CVE-2020-11520","description":"The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2020-06-22 18:15:00","updated_at":"2022-05-03 13:59:00"},"problem_types":["CWE-119"],"metrics":[],"references":[{"url":"https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1","name":"https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1","refsource":"CONFIRM","tags":[],"title":"SecureDoc V8.5 SR2 HF1 Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2/","name":"https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2/","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"SecureDoc V8.5 SR2 Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11520","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11520","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"11520","vulnerable":"1","versionEndIncluding":"8.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"winmagic","cpe5":"securedoc","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2020-11520","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"refsource":"CONFIRM","name":"https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2/","url":"https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2/"},{"refsource":"CONFIRM","name":"https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1","url":"https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1"}]}},"nvd":{"publishedDate":"2020-06-22 18:15:00","lastModifiedDate":"2022-05-03 13:59:00","problem_types":["CWE-119"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"severity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:winmagic:securedoc:*:*:*:*:*:*:*:*","versionEndIncluding":"8.5","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"11520","Ordinal":"172069","Title":"CVE-2020-11520","CVE":"CVE-2020-11520","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"11520","Ordinal":"1","NoteData":"The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"11520","Ordinal":"2","NoteData":"2020-06-22","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"11520","Ordinal":"3","NoteData":"2020-07-17","Type":"Other","Title":"Modified"}]}}}