CVE-2020-12446
HIGHG.SKILL Trident Z Lighting Control <1.00.08 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-12446. PoCs published by enessakircolak, S1lkys.
AI-analyzed exploit summary This is a local privilege escalation (LPE) exploit for Windows 11 24H2, leveraging a kernel vulnerability (CVE-2020-12446) to escalate privileges by manipulating memory mappings and leaking kernel structures.
Description
The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writing to Model Specific Register (MSR) registers, and input from and output to I/O ports to local non-privileged users. This leads to privilege escalation to NT AUTHORITY\SYSTEM.
Exploits (3)
This is a local privilege escalation (LPE) exploit for Windows 11 24H2, leveraging a kernel vulnerability (CVE-2020-12446) to escalate privileges by manipulating memory mappings and leaking kernel structures.
This repository contains a functional exploit PoC for CVE-2020-12446, targeting a Windows kernel vulnerability. The code demonstrates memory mapping and kernel structure manipulation to achieve privilege escalation.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2020-12446. The exploit leverages a vulnerable driver to map physical memory into userspace, leaks the System EPROCESS address via handle table enumeration, and patches the current process token to achieve SYSTEM privileges.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H