Exploitation Summary
CVE-2020-15368 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including stong, R7flex.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-15368, targeting a vulnerable Asrock driver that allows arbitrary kernel code execution. The exploit demonstrates manual mapping of a driver and leveraging the vulnerable IOCTL to execute arbitrary payloads in kernel mode.
Description
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3.
Exploits (3)
This repository contains a proof-of-concept exploit for CVE-2020-15368, targeting a vulnerable Asrock driver that allows arbitrary kernel code execution. The exploit demonstrates manual mapping of a driver and leveraging the vulnerable IOCTL to execute arbitrary payloads in kernel mode.
This is a proof-of-concept exploit for CVE-2020-15368, targeting ASRock motherboard drivers. The exploit leverages a vulnerability in the driver to achieve local privilege escalation (LPE) by manipulating kernel memory and executing arbitrary code in kernel mode.
KDU is a kernel driver utility that exploits vulnerable drivers to bypass security mechanisms like Driver Signature Enforcement (DSE) and Protected Process Light (PPL). It provides functionality to load unsigned drivers, modify process protections, and dump process memory by leveraging known vulnerable drivers from various vendors.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N