CVE-2024-39251

CRITICAL

10.0

Descripcion

An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests.

Detalles CVE

Puntuacion CVSS v3.110.0

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado7/1/2024

Ultima modificacion3/13/2025

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-782

Referencias

https://github.com/Souhardya/Exploit-PoCs/tree/main/ThundeRobot_Control_center(cve@mitre.org)

https://github.com/Souhardya/Exploit-PoCs/tree/main/ThundeRobot_Control_center(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.