EIP-2026-117978
PRE-CVESygate Personal Firewall Pro 5.5 - Local Fail-Close Bypass
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117978. PoCs published by Tan Chew Keong.
AI-analyzed exploit summary This exploit demonstrates a local privilege escalation vulnerability in Sygate Personal Firewall by sending a crafted IOCTL request to the kernel-space NDIS driver device (\\.\Teefer) to disable the firewall's fail-closed functionality. The code opens a handle to the device and sends a specific control code (0x212094) with a zeroed buffer to manipulate the driver's state.
Description
Sygate Personal Firewall Pro 5.5 - Local Fail-Close Bypass
Exploits (1)
This exploit demonstrates a local privilege escalation vulnerability in Sygate Personal Firewall by sending a crafted IOCTL request to the kernel-space NDIS driver device (\\.\Teefer) to disable the firewall's fail-closed functionality. The code opens a handle to the device and sends a specific control code (0x212094) with a zeroed buffer to manipulate the driver's state.