CVE-2020-11520: Winmagic Securedoc

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution.

Affected products

• Winmagic Securedoc: up to and including 8.5

Published 2020-06-22. Last modified 2026-06-17.