CVE-2018-10711 | BDVDB-2026-108945 Detail

Description#

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers (MSRs). This could be leveraged to execute arbitrary ring-0 code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.secureauth.com/labs/advisories/asrock-drivers-elevation-privilege-vulnerabilities
https://www.exploit-db.com/exploits/45716/

Exploit#

https://www.exploit-db.com/exploits/45716/

History#

Version 12018-10-30Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.