Ironshield
Monthly
Local, unprivileged attackers can bypass the Ironshield tvk.sys driver's authentication to gain access to privileged IOCTL functionality on Windows hosts running IRONMACE Ironshield 1.0.0.167 with the driver loaded. The driver checks for literal publisher and root-certificate strings in WIN_CERTIFICATE data instead of cryptographically validating the PKCS signature, so any binary embedding 'IRONMACE Co., Ltd.' and 'DigiCert Trusted Root G4' is accepted. Rated CVSS 5.1, this local-only flaw limits impact to privileged IOCTL access rather than confirmed full system compromise; no public exploit identified at time of analysis.
Local, unprivileged attackers can bypass the Ironshield tvk.sys driver's authentication to gain access to privileged IOCTL functionality on Windows hosts running IRONMACE Ironshield 1.0.0.167 with the driver loaded. The driver checks for literal publisher and root-certificate strings in WIN_CERTIFICATE data instead of cryptographically validating the PKCS signature, so any binary embedding 'IRONMACE Co., Ltd.' and 'DigiCert Trusted Root G4' is accepted. Rated CVSS 5.1, this local-only flaw limits impact to privileged IOCTL access rather than confirmed full system compromise; no public exploit identified at time of analysis.