Paper/Archive/CVE-2024-39251

CVE-2024-39251

thunderobot control_center — An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensit…

EPSS 0.7%public exploit CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (ADP)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 54.1.541 × 2010.8 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

control_center2.0.0.10–CISA-ADP

Scores by source

CISA ADP10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/Souhardya/Exploit-PoCs/tree/main/ThundeRobot_Control_center