Speedfan
Vendor:
First CVE: Oct 23, 2007 · Active for 18 years
3
Total CVEs
More Total CVEs than 68% of tracked products
1.5
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 37% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Speedfan over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 23, 2007
18 years ago
Most Recent CVE
Dec 3, 2020
2,063 days ago
CVE Severity & Scoring
Speedfan3 CVEs
33%
67%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local1 (33.3%)
Network0 (0.0%)
Unknown2 (66.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (33.3%)
High0 (0.0%)
Unknown2 (66.7%)
User Interaction
None1 (33.3%)
Unknown2 (66.7%)
Required0 (0.0%)
Privileges Required
Low1 (33.3%)
High0 (0.0%)
None0 (0.0%)
Unknown2 (66.7%)
Top CVEs
Signals from CVEs in this product scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-5633HIGH Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load | Oct 23, 2007 | 7.2 | 29 | NO | YES |
CVE-2020-28175HIGH There is a local privilege escalation vulnerability in Alfredo Milani Comparetti SpeedFan 4.52. Attackers can use constructed programs to increase user privileges | Dec 3, 2020 | 7.8 | 20 | NO | NO |
CVE-2007-5634MEDIUM Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows lo | Oct 23, 2007 | 4.9 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (3 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
33.3% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (3 CVEs).
Media Mentions
Signals from CVEs in this product scope (3 CVEs).
Top CNAs Publishing CVEs For Speedfan
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.52 | 1 | 7.8 | 0.5% | 0 | 0 |
| 4.33 | 2 | 6.0 | 0.7% | 0 | 1 |