CVE-2008-5725 json
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain priv…
published 2008-12-26 17 y ago modified 2026-06-16 4 mo ago also EUVD-2008-5695
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.8%
- EPSS 0.8% chance of exploitation in 30 days, percentile 58%
- public exploits
- 1
- Exploit-DB
Summary
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.
Timeline
- First public exploit (EDB-7533)
- Published
Exploit prediction
0.85% chance of exploitation in the next 30 days, higher than 58% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-7533 PowerStrip 3.84 - 'pstrip.sys' Local Privilege Escalation local, 2008-12-21
- ntinternals.org http://www.ntinternals.org/ntiadv0810/ntiadv0810.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
exploit-db.com
/exploits/7533
exploit
-
ntinternals.org
/ntiadv0810/ntiadv0810.html
exploit
-
secunia.com
/advisories/33249
third-party-advisory, vendor-advisory
-
securityfocus.com
/bid/32961
vdb-entry
-
securityreason.com
/securityalert/4809
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/47532
vdb-entry
Sources
- CVE List CVE-2008-5725
- NVD CVE-2008-5725
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.