CVE-2024-30804

ASUS 드라이버 LPE PoC 물리 메모리 남용 이것은 AsInsHelp64.sys 드라이버를 악용하는 로컬 권한 상승LPE PoC입니다. 합법적이고 서명된 ASUS 드라이버를 남용하여 물리 메모리를 매핑하고 커널 토큰을 덮어쓰며, 궁극적으로 NT AUTHORITY\SYSTEM 권한을 획득합니다. 🎯 취약점 정보 대상 : AsInsHelp64.sys ASUS 팬 Xpert v.10013 미만 관련 기법 : 임의 물리 메모리 읽기/쓰기 근본 원인 : 드라이버는 모든 사용자가 물리 메모리를 가상 주소 공간에 매핑할 수 있는...

The vulnerability of the AsInsHelp64.sys driver, part of the DeviceIoControl utility in ASUS’ ASUS Fan Xpert computer and laptop fan control software, allows a hacker to execute arbitrary code, increase their privileges, or disclose sensitive information.

The vulnerability of the AsInsHelp64.sys driver, which is part of the DeviceIoControl utility in the ASUS ASUS Fan Xpert speed control software, relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, gain...

ASUS Fan Xpert 安全漏洞

ASUS Fan Xpert is an application for controlling case fans from the Chinese company Asus ASUS. It intelligently adjusts CPU and case fan speeds based on different climate conditions in different geographic regions and different ambient temperatures due to the computer's system load. A security...

PT-2024-5165 · Asus · Asus Fan Xpert +1

Name of the Vulnerable Software and Affected Versions: ASUS Fan Xpert versions prior to 10013 Description: An issue in the DeviceIoControl component allows an attacker to execute arbitrary code via crafted IOCTL requests. The vulnerability is related to a buffer overflow in the AsInsHelp64.sys...