CVE-2004-1658: Kerio Personal Firewall

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.

Affected products

• Kerio Personal Firewall: version 4.0.6 only; version 4.0.7 only; version 4.0.8 only; version 4.0.9 only; version 4.0.10 only; version 4.0.16 only

Published 2004-09-02. Last modified 2026-06-16.