github.com
https://github.com/Souhardya/Exploit-PoCs/tree/main/ThundeRobot_Control_center CVE-2024-39251
CRITICAL
Record summary
CVE-2024-39251 has a selected CVSS score of 10.0 (critical).
Description
An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 9, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
control_centerBrowse thunderobot / control_centerDefault status: unknown | CVE List | 2.0.0.10 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-39251