CVE-2020-15368-AsrDrv103-research

CVE-2020-15368 — AsrDrv103.sys 이 저장소는 CVE-2020-15368 과 관련된 ASRock AsrDrv103.sys Windows 커널 드라이버의 리버스 엔지니어링에 관한 자료를 담고 있습니다. 이 프로젝트는 Windows 커널 드라이버, 드라이버 통신 인터페이스, 저수준 하드웨어 접근, 그리고 취약한 드라이버 설계에 대한 실습 연구로서 만들어졌습니다. 저는 CVE-2020-15368의 최초 발견자가 아닙니다. 이 저장소의 목적은 드라이버에 대한 제 자신의 분석과 이해를 문서화하는 것입니다. 분석 문...

asrockploit

exécution de code arbitraire avec CVE-2020-15368...

APT Cyber Tools Targeting ICS/SCADA Devices

Summary Actions to Take Today to Protect ICS/SCADA Devices: • Enforce multifactor authentication for all remote access to ICS networks and devices whenever possible. • Change all passwords to ICS/SCADA devices and systems on a consistent schedule, especially all default passwords, to device-uniqu...

Feds: APTs Have Tools That Can Take Over Critical Infrastructure

Threat actors have built and are ready to deploy tools that can take over a number of widely used industrial control system ICS devices, which spells trouble for critical infrastructure providers—particularly those in the energy sector, federal agencies have warned. In a joint advisory, the...

CVE-2020-15368

creationtimestamp| type| source ---|---|--- 2021-06-30 07:03:28+00:00| published-proof-of-concept| https://t.me/orderofsixangles/1482 2021-07-01 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3736 2021-07-30 07:56:22+00:00| published-proof-of-concept|...

Exploit for CVE-2020-15368

How to exploit a vulnerable windows driver Exploit and Proof...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3...

CVE-2020-15368

CVE-2020-15368 involves ASRock RGB Driver’s AsrDrv103.sys, which fails to restrict user-space access. The Red Hat advisory and other sources confirm the issue can be triggered via a crafted request to CR3, enabling kernel-level code execution (e.g., triple fault scenario) and potential post-explo...