CVE-2009-4832

CVE-2009-4832 describes a local privilege escalation vulnerability affecting DESlock+ 4.0.2, specifically within its dlpcrypt.sys kernel driver. An attacker can exploit this by sending a specially crafted IOCTL request (0x80012010) to the DLPCryptCore device, leading to full compromise of the system. With a CVSS score of 7.2 (High), this vulnerability allows for complete confidentiality, integrity, and availability impact with low attack complexity. While not listed on CISA's KEV catalog, exploit code for local kernel ring0 code execution is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.