CVE-2018-6522: Inca Nprotect Avs

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220408.

Affected products

• Inca Nprotect Avs: from 4.0, before 4.0.0.39 (fixed in 4.0.0.39)

Published 2018-02-02. Last modified 2026-06-17.