CVE-2020-15368

如何利用一个存在漏洞的Windows驱动程序 针对 CVE-2020-15368 的漏洞利用与概念验证（PoC）。Asrock 将 rweverything 驱动程序重新打包，用于其 RGB 控制器配置工具，并对其进行了签名。他们通过加密 ioctl 来“保护”这个驱动……呵呵。去年夏天我们偶然发现了这个 CVE，据我所知，该驱动程序至今仍未得到修补。其影响自然是内核中的任意代码执行等。那么，请享用这个“0day”吧，哈哈。 如果你想和我争论这是否是一个真正的、可靠的 CVE，请随时在 Twitter...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

VulnCheck KEV: CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

Unspecified Vulnerability in ASRock RGB Driver

ASRock RGB Driver is a RGB three primary colors light mode light driver from ASRock Taiwan, China. A security vulnerability exists in the AsrDrv103.sys file in ASRock RGB Driver, which originates from the program's failure to properly restrict access from user space. No details of the vulnerabili...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

Design/Logic Flaw

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

PT-2020-6648

Name of the Vulnerable Software and Affected Versions ASRock RGB Driver versions with AsrDrv103.sys affected versions not specified Description The issue is related to the AsrDrv103.sys driver in the ASRock RGB Driver, which does not properly restrict access from user space. This can be...

CVE-2020-15368: Improper Privilege Management

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...