The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write CR register values. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-10-30T18:00:00

Updated: 2024-08-05T07:46:46.378Z

Reserved: 2018-05-03T00:00:00

Link: CVE-2018-10709

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-10-30T18:29:00.393

Modified: 2024-11-21T03:41:54.257

Link: CVE-2018-10709

cve-icon Redhat

No data.