Product:
Storvsp.sys Driver
Summary
Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally. This vulnerability can lead to significant service disruption if exploited. It is important for users to be aware of the potential risks associated with this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-60708 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the pointer dereference in the Storvsp.sys Driver. By doing so, they can cause the system to become unresponsive, leading to a denial of service. The attack requires low privileges and does not necessitate user interaction, making it relatively straightforward for an authorized user to execute.
Affected Products
- Storvsp.sys Driver: Vulnerable to untrusted pointer dereference, allowing local denial of service.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should regularly check for updates and ensure that their systems are patched to protect against potential exploitation. Additionally, limiting local access to trusted users can help reduce the risk.