EIP-2026-117978

This exploit demonstrates a local privilege escalation vulnerability in Sygate Personal Firewall by sending a crafted IOCTL request to the kernel-space NDIS driver device (\\.\Teefer) to disable the firewall's fail-closed functionality. The code opens a handle to the device and sends a specific control code (0x212094) with a zeroed buffer to manipulate the driver's state.