MSI KernCoreLib64.sys Physical Memory & I/O Port Abuse Privilege Escalation PoC

Vulnerability Overview Vulnerability Name: KernCoreLib64.sys Vulnerability PoC Vulnerability Description: This vulnerability involves the abuse of physical memory and I/O ports, which could lead to privilege escalation. Affected Scope Affected Systems: Systems using KernCoreLib64.sys. Vulnerability Type: Abuse of physical memory and I/O ports. Remediation Current Status: No specific remediation measures are provided on the page. Recommendation: Users should monitor for relevant security updates and consider using safer alternative drivers. POC Code ```plaintext C:\Users\PC\source\repos\MSI_FeatureManager_CVEv64\Release\phys_mem.exe [PID: 7792] Name: svchost.exe EPID:0x55 Phys: 0x1d0e0800 Base VA: 0x7f7773330000 [PID: 7900] Name: RuntimeBroker.exe EPID:0x55 Phys: 0x1d0e1000 Base VA: 0x7f7742270000 [PID: 2196] Name: Feature Manager EPID:0x55 Phys: 0x1d0e1c00 Base VA: 0x7f7726400000 [PID: 8368] Name: Feature Manager EPID:0x55 Phys: 0x1d0e2800 Base VA: 0x7f7726400000 [PID: 7550] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e3000 Base VA: 0x7f7779370000 [PID: 8388] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e3800 Base VA: 0x7f7779400000 [PID: 9388] Name: vetool64.exe EPID:0x55 Phys: 0x1d0e4000 Base VA: 0x7f77794d0000 [PID: 9828] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e4800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e5000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e5800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e6000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e6800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e7000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e7800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e8000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e8800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e9000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0e9800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ea000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ea800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0eb000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0eb800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ec000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ec800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ed000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ed800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ee000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ee800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ef000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0ef800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f0000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f0800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f1000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f1800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f2000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f2800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f3000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f3800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f4000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f4800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f5000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f5800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f6000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f6800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f7000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f7800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f8000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f8800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f9000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0f9800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0fa000 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0fa800 Base VA: 0x7f77794d0000 [PID: 9728] Name: wudfhost.exe EPID:0x55 Phys: 0x1d0fb000 Base VA: 0x7f77794d0000 [PID

Goal Reached Thanks to every supporter — we hit 100%!

MSI KernCoreLib64.sys Physical Memory & I/O Port Abuse Privilege Escalation PoC

More from this source