CVE-2018-19323
CRITICAL KEV RANSOMWAREGIGABYTE APP Center <v1.05.21 - Info Disclosure
Title source: llmExploitation Summary
CVE-2018-19323 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 24, 2022, with confirmed use in ransomware campaigns. EIP tracks 3 public exploits from researchers including blueisbeautiful, fuckyourheroes, brokendreamsclub.
AI-analyzed exploit summary This repository contains a functional exploitation framework for CVE-2018-19323, targeting the GIGABYTE gdrv.sys driver to achieve local privilege escalation via arbitrary MSR read/write operations. The framework includes modular components for payload generation, evasion techniques, and multi-architecture support.
Description
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
Exploits (3)
This repository contains a functional exploitation framework for CVE-2018-19323, targeting the GIGABYTE gdrv.sys driver to achieve local privilege escalation via arbitrary MSR read/write operations. The framework includes modular components for payload generation, evasion techniques, and multi-architecture support.
This repository contains a functional exploitation framework for CVE-2018-19323, targeting the GIGABYTE gdrv.sys driver to achieve local privilege escalation via arbitrary MSR read/write operations. The framework includes modular components for payload generation, evasion techniques, and multi-architecture support.
This repository contains a modular exploitation framework for CVE-2018-19323, targeting the GIGABYTE gdrv.sys driver to achieve local privilege escalation via arbitrary MSR read/write operations. It includes advanced features like multi-architecture support, evasion techniques, and payload generation.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H