Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL 0x9c40a0e0, the first dword passed in the input buffer is the device port to write to and the dword at offset 4 is the value to write via the OUT instruction. A local attacker can send a malicious IRP to trigger this vulnerability.
CVSS Information
N/A
Vulnerability Type
无充分访问控制条件下暴露IOCTL
Vulnerability Title
IOBit Advanced SystemCare 安全漏洞
Vulnerability Description
Iobit IOBit Advanced SystemCare是英国IOBit（Iobit）公司的一款系统管理实用程序。该程序主要用于扫描、修复和优化系统等。 IOBit Advanced SystemCare Ultimate 存在安全漏洞，该漏洞源于该产品14.2.0.220版本的驱动程序处理特权IO写请求的方式存在特权升级漏洞。攻击者可利用该漏洞发送恶意IRP来触发此漏洞。
CVSS Information
N/A
Vulnerability Type
N/A