CVE-2022-3699

CVE-2022-3699 Lenovo Diagnostics 드라이버의 잘못된 액세스 제어로 인해 낮은 권한의 사용자가 디바이스 IOCTL을 발행하여 임의의 물리적/가상 메모리 읽기/쓰기를 수행할 수 있습니다. ch3rn0byl 님의 도움에 감사드립니다 그리고 저는 그의 함수 두 개를 100% 그대로 베꼈습니다. 설명 IOCTL 0x222000: rdmsr IOCTL 0x222008/0x22200C: HalGet/SetBusData IOCTL 0x222010: MmMapIoSpace를 통한 읽기 IOCTL 0x222014:...

Lenovo Diagnostics Driver Memory Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lenovo Diagnostics Driver IOCTL memmove', 'Description' = %q Incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged...

Lenovo Diagnostics Driver Memory Access Exploit

This Metasploit module demonstrates how an incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged user the ability to issue device IOCTLs to perform arbitrary physical/virtual memory reads and writes. This module requires Metasploit: https://metasploit.com/download...

Lenovo Diagnostics Driver IOCTL memmove

Incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged user the ability to issue device IOCTLs to perform arbitrary physical/virtual memory read/write. Module Options msf use exploit/windows/local/cve/20223699lenovodiagnosticsdriver msf...