CVE-2026-84696— Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands
Quick assessment
Affected
Phison Electronics Corporation PS3111-S11 Controller Firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Phison（慧荣）PS3111-S11 控制器固件（版本至 SBFQT1.3）通过 ATA 接口暴露了具有特权级的供应商独有命令（VUC），但其认证机制缺失或可被绕过。攻击者可以绕过基于弱 CRC-16 的解锁握手协议，或利用未启用 VUC 锁定的固件构建版本，从而实现对控制器内存和原始闪存（raw flash）的读写操作，使得植入的程序/后门能够在电源循环中持久化存在。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-84696
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands
Source: CVE Program / CVE List V5
Vulnerability Description
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Phison Electronics Corporation | PS3111-S11 Controller Firmware | SBFQT1.3 | - |
|
II. Public POCs for CVE-2026-84696
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-84696
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-84696 (1)
Proof of Concept for CVE-2026-84696 (1)
IV. Related Vulnerabilities
Same weakness: CWE-306
-
CVE-2026-84485
APITable through 1.13.0-beta.1 Missing Authentication on the -
CVE-2026-84700
Pika Unauthenticated Replication Access via Internal Protobu -
CVE-2026-84423
Casdoor upload-resource API resource.go missing authenticati -
CVE-2026-79687
Dell PowerStore SDNAS 缺失认证致文件访问 -
CVE-2026-18771
Missing Authentication for Critical Function in TMT Machine'
V. Comments for CVE-2026-84696
No comments yet