NVD-CWE-noinfo

OR
          *cpe:2.3:a:paragon-software:paragon_backup_&_recovery:*:*:*:*:*:*:*:* versions from (including) 15 up to (including) 17.39
          *cpe:2.3:a:paragon-software:paragon_disk_wiper:*:*:*:*:*:*:*:* versions from (including) 15 up to (including) 16
          *cpe:2.3:a:paragon-software:paragon_drive_copy:*:*:*:*:*:*:*:* versions from (including) 15 up to (including) 16
          *cpe:2.3:a:paragon-software:paragon_hard_disk_manager:*:*:*:*:*:*:*:* versions from (including) 15 up to (including) 17.39
          *cpe:2.3:a:paragon-software:paragon_migrate_os_to_ssd:*:*:*:*:*:*:*:* versions from (including) 4 up to (including) 5
          *cpe:2.3:a:paragon-software:paragon_partition_manager:*:*:*:*:*:*:*:* versions from (including) 15 up to (including) 17.39

CERT/CC: https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys Types: Vendor Advisory

CERT/CC: https://www.kb.cert.org/vuls/id/726882 Types: Third Party Advisory

CERT/CC: https://www.paragon-software.com/support/#patches Types: Product

Paragon Partition Manager version 17.9.1, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Paragon Partition Manager version 17, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Paragon Partition Manager version 17.9.1, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-20

https://www.paragon-software.com/support/#patches

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-20

Paragon Partition Manager version 17, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys

https://www.kb.cert.org/vuls/id/726882