Kerio Personal Firewall 4.0 (KPF4) Local Privilege Escalation Vulnerability

Kerio Personal Firewall 4.0 (KPF4) Local Privilege Escalation Vulnerability

CVE-2004-1658 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.

Learn more about our Physical Security Assessment.