- Monitor Asset Manager 2.9, Se64a.sys 5.0.1.1
- https://www.entechtaiwan.com/util/moninfo.shtm
Denial of Service
From IoControlCode 0x80002014, a normal user can call __outbyte, __outword, and __outdword, which can lead to denial of service and other unknown impacts on the system.
In the attached file DoS.zip, there are DoS.exe, DoS.cpp, mi_setup.exe, and Se64a.sys. DoS.exe is the PoC to cause DoS where mi_setup.exe which contains the vulnerable driver Se64a.sys is installed, and DoS.cpp is the source code of DoS.exe. To reproduce the issue, install mi_setup.exe and execute DoS.exe. It is expected that the system will restart once DoS.exe is executed. Password for attachment: DoS https://drive.google.com/file/d/1ehTYhcdeTiB4rQ38n5FqhQZgVqcvvPE_/view?usp=sharing