CVE-2018-10709

Related Files

ASRock Drivers Privilege Escalation / Code Execution

Posted Oct 27, 2018

Authored by Core Security Technologies, Diego Juarez | Site secureauth.com

ASRock offers several utilities designed to give the user with an ASRock motherboard more control over certain settings and functions. These utilities include various features like the RGB LED control, hardware monitor, fan controls, and overclocking/voltage options. Multiple vulnerabilities were found in AsrDrv101.sys and AsrDrv102.sys low level drivers, installed by ASRock RGBLED and other ASRock branded utilities, which could allow a local attacker to elevate privileges. Vulnerable packages include ASRock RGBLED before version 1.0.35.1, A-Tuning before version 3.0.210, F-Stream before version 3.0.210, and RestartToUEFI before version 1.0.6.2.

tags | exploit, local, vulnerability

advisories | CVE-2018-10709, CVE-2018-10710, CVE-2018-10711, CVE-2018-10712

SHA-256 | 3b57e1d843a64059edf1200acba22a276913db2838fb449328d307badda0ce0e

Download | Favorite | View