Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-18845. PoCs published by fengjixuchui.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2019-18845, which leverages arbitrary kernel physical memory read/write via the MsIo64.sys/MsIo32.sys drivers in Patriot Viper RGB software. The exploit demonstrates the vulnerability by sending crafted IOCTL requests to the driver, though the full memory manipulation logic is not fully implemented in the provided code.
Description
The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling process via ZwOpenSection and ZwMapViewOfSection.
Exploits (1)
The repository contains a functional exploit for CVE-2019-18845, which leverages arbitrary kernel physical memory read/write via the MsIo64.sys/MsIo32.sys drivers in Patriot Viper RGB software. The exploit demonstrates the vulnerability by sending crafted IOCTL requests to the driver, though the full memory manipulation logic is not fully implemented in the provided code.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N