CVE-2015-6923
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to...
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.
Exploit likelihood
What each source reports
NVD Score used
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.
- Record
CVE-2015-6923- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.
- Record
CVE-2015-6923- Updated
- 2026-11-02
EUVDEUVD-2015-6858 No score
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.
- Record
EUVD-2015-6858- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2c42-4jvc-gq6p No score
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to...
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.
- Record
GHSA-2c42-4jvc-gq6p- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | VBox Satellite Express 2.3.17.3 - Arbitrary Write | 2015-09-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-6923 is a high vulnerability (CVSS 7.2) in Vboxcomm Satellite Express Protocol, published September 21, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.92%, the 60th percentile. No source names a fixed version.
References
seclists.org/fulldisclosure/2015/Sep/72
packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html
exploit-db.com/exploits/38225
securityfocus.com/archive/1/536491/100/0/threaded
korelogic.com/Resources/Advisories/KL-001-2015-005.txt
nvd.nist.gov/vuln/detail/CVE-2015-6923
github.com/advisories/GHSA-2c42-4jvc-gq6p