Skip to content

Latest commit

 

History

History

CVE-2023-2870

EnTech Taiwan, Se64a.sys, Arbitrary out

Vulnerability Info

Version

Impact

Denial of Service

Description

From IoControlCode 0x80002014, a normal user can call __outbyte, __outword, and __outdword, which can lead to denial of service and other unknown impacts on the system.

Reproduce

In the attached file DoS.zip, there are DoS.exe, DoS.cpp, mi_setup.exe, and Se64a.sys. DoS.exe is the PoC to cause DoS where mi_setup.exe which contains the vulnerable driver Se64a.sys is installed, and DoS.cpp is the source code of DoS.exe. To reproduce the issue, install mi_setup.exe and execute DoS.exe. It is expected that the system will restart once DoS.exe is executed. Password for attachment: DoS https://drive.google.com/file/d/1ehTYhcdeTiB4rQ38n5FqhQZgVqcvvPE_/view?usp=sharing