Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-36603. PoCs published by gmh5225.
AI-analyzed exploit summary This repository provides a detailed analysis of CVE-2020-36603, a vulnerability in the HoYoVerse Genshin Impact mhyprot2.sys anti-cheat driver that allows local privilege escalation (LPE) due to inadequate restrictions on unprivileged function calls. It includes references to technical writeups, exploit repositories, and real-world abuse cases but does not contain functional exploit code.
Description
The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be installed by a user with administrative privileges.
Exploits (1)
This repository provides a detailed analysis of CVE-2020-36603, a vulnerability in the HoYoVerse Genshin Impact mhyprot2.sys anti-cheat driver that allows local privilege escalation (LPE) due to inadequate restrictions on unprivileged function calls. It includes references to technical writeups, exploit repositories, and real-world abuse cases but does not contain functional exploit code.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H