| tiêu đề | Kingston Kingston FURY CTRL RGB controller 2.0.65.0 Kernel Mitigation & access bypass |
|---|
| Mô tả | I am a security researcher who has identified multiple critical vulnerabilities in your Kingston FURY CTRL RGB controller driver (NTIOLib_KSFX.sys) that allow unprivileged users to achieve SYSTEM-level privileges.
VULNERABILITIES:
- World-accessible device (no privilege checks)
- Hardcoded authentication bypass (magic: 0x2f405a34)
- Unrestricted kernel memory read/write
- Direct MSR manipulation (SMEP/SMAP bypasses)
IMPACT: Complete system compromise from unprivileged user account
PROOF OF CONCEPT ATTACHED:
- Device successfully opened and unlocked
- MSR reads confirm SMEP/SMAP disabled
- Kernel memory access primitives verified
- Complete exploit chain documented I am committed to responsible disclosure. |
|---|
| Nguồn | ⚠️ https://drive.google.com/file/d/19a8Qix5YVMNy8TH5k4PWiu0FQLtPRsJp/view?usp=sharing;https://drive.google.com/file/d/1Vqw9d9jkKbl4r2dC1Ry5m_1uzL5JV25H/view?usp=sharing |
|---|
| Người dùng | Raulisr00t (UID 99240) |
|---|
| Đệ trình | 23/06/2026 20:56 (cách đây 2 các tháng) |
|---|
| Kiểm duyệt | 09/08/2026 18:28 (2 months later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 387274 [Kingston FURY CTRL RGB Control Software 2.0.65.0 Driver NTIOLib_KSFX.sys nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|