How severe is CVE-2002-2126?

CVE-2002-2126 has a CVSS 2.0 base score of 2.1, rated low severity.

Is CVE-2002-2126 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (35th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-2126?

CVE-2002-2126 affects Pedestal Software Integrity Protection Driver. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2002-2126?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2002-2126 published?

CVE-2002-2126 was published on 2002-12-31 and last updated on 2026-06-16.

CVE-2002-2126

CVE-2002-2126 is a low-severity vulnerability in Pedestal Software Integrity Protection Driver with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.1)
EPSS exploit prediction: 0% (35th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Pedestal Software Integrity Protection Driver
Published: 2002-12-31
Last modified: 2026-06-16

Description

restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.

Frequently asked questions

What is CVE-2002-2126?: restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.
How severe is CVE-2002-2126?: CVE-2002-2126 has a CVSS 2.0 base score of 2.1, rated low severity.
Is CVE-2002-2126 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (35th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-2126?: CVE-2002-2126 affects Pedestal Software Integrity Protection Driver. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2002-2126?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2002-2126 published?: CVE-2002-2126 was published on 2002-12-31 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:pedestal_software:integrity_protection_driver:1.2:*:*:*:*:*:*:*

More vulnerabilities in Pedestal Software Integrity Protection Driver

CVE-2004-1718 — Low (CVSS 2.1): The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of…
CVE-2003-1246 — Low (CVSS 2.1): NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create…
CVE-2002-2127 — Low (CVSS 2.1): Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could…

All CVEs affecting Pedestal Software Integrity Protection Driver →