CVE-2024-2180 - Vulnerability Details - OpenCVE

Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Zemana	Antilogger

Configuration 1 [-]

cpe:2.3:a:zemana:antilogger:2.74.2.664:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://fluidattacks.com/advisories/gomez/
https://zemana.com/us/antilogger.html

History

Thu, 10 Apr 2025 21:15:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:zemana:antilogger::::::::
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 23 Jan 2025 19:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Zemana Zemana antilogger
CPEs		cpe:2.3:a:zemana:antilogger:2.74.2.664:::::::*
Vendors & Products		Zemana Zemana antilogger

Thu, 05 Sep 2024 23:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-200

Thu, 05 Sep 2024 23:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-404

MITRE

Status: PUBLISHED

Assigner: Fluid Attacks

Published: 2024-03-15T04:17:57.931Z

Updated: 2025-04-10T20:29:36.918Z

Reserved: 2024-03-04T21:47:23.541Z

Link: CVE-2024-2180

Vulnrichment

Updated: 2024-08-01T19:03:39.081Z

NVD

Status : Analyzed

Published: 2024-03-15T05:15:06.393

Modified: 2025-01-23T19:21:38.040

Link: CVE-2024-2180

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-2180", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "state": "PUBLISHED", "assignerShortName": "Fluid Attacks", "dateReserved": "2024-03-04T21:47:23.541Z", "datePublished": "2024-03-15T04:17:57.931Z", "dateUpdated": "2025-04-10T20:29:36.918Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Windows"], "product": "AntiLogger", "vendor": "Zemana", "versions": [{"status": "affected", "version": "2.74.204.664"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers"}], "value": "Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers"}], "impacts": [{"capecId": "CAPEC-131", "descriptions": [{"lang": "en", "value": "CAPEC-131 Resource Leak Exposure"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-404", "description": "CWE-404 Improper Resource Shutdown or Release", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2024-09-05T22:53:02.754Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://fluidattacks.com/advisories/gomez/"}, {"tags": ["product"], "url": "https://zemana.com/us/antilogger.html"}], "source": {"discovery": "UNKNOWN"}, "title": "Zemana AntiLogger v2.74.204.664 - Kernel Memory Leak", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "zemana", "product": "antilogger", "cpes": ["cpe:2.3:a:zemana:antilogger:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.74.204.664", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-18T13:46:55.004717Z", "id": "CVE-2024-2180", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-10T20:29:36.918Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:03:39.081Z"}, "title": "CVE Program Container", "references": [{"tags": ["third-party-advisory", "x_transferred"], "url": "https://fluidattacks.com/advisories/gomez/"}, {"tags": ["product", "x_transferred"], "url": "https://zemana.com/us/antilogger.html"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://fluidattacks.com/advisories/gomez/", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://zemana.com/us/antilogger.html", "tags": ["product", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:03:39.081Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-2180", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-18T13:46:55.004717Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:zemana:antilogger:*:*:*:*:*:*:*:*"], "vendor": "zemana", "product": "antilogger", "versions": [{"status": "affected", "version": "2.74.204.664"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-19T17:18:48.451Z"}}], "cna": {"title": "Zemana AntiLogger v2.74.204.664 - Kernel Memory Leak", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-131", "descriptions": [{"lang": "en", "value": "CAPEC-131 Resource Leak Exposure"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Zemana", "product": "AntiLogger", "versions": [{"status": "affected", "version": "2.74.204.664"}], "platforms": ["Windows"], "defaultStatus": "unknown"}], "references": [{"url": "https://fluidattacks.com/advisories/gomez/", "tags": ["third-party-advisory"]}, {"url": "https://zemana.com/us/antilogger.html", "tags": ["product"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers", "supportingMedia": [{"type": "text/html", "value": "Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "CWE-404 Improper Resource Shutdown or Release"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2024-09-05T22:53:02.754Z"}}}, "cveMetadata": {"cveId": "CVE-2024-2180", "state": "PUBLISHED", "dateUpdated": "2025-04-10T20:29:36.918Z", "dateReserved": "2024-03-04T21:47:23.541Z", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "datePublished": "2024-03-15T04:17:57.931Z", "assignerShortName": "Fluid Attacks"}, "dataVersion": "5.1"}