CVE-2025-66678

CRITICAL

Nil Hardware Editor <1.25.11.26 - Memory Corruption

Title source: llm

Description

An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request.

Exploits (1)

nomisec WORKING POC 1 stars

by cwjchoi01 · poc

https://github.com/cwjchoi01/CVE-2025-66678

View Code ZIP pw:eip

References (2)

Core 2

Core References

Various Sources

https://github.com/Faintsnow/HE

Exploit, Third Party Advisory

https://github.com/cwjchoi01/CVE-2025-66678

View Exploit ZIP pw:eip

Scores

CVSS v3 9.8

EPSS 0.0008

EPSS Percentile 24.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

Details

CWE

CWE-89

Status published

Products (1)

faintsnow/hardware_read_\&_write_utility < 1.25.11.26

Published Mar 04, 2026

Tracked Since Mar 05, 2026