Out-of-bounds read in Msi Afterburner
CVSS score
7.8
EPSS probability
%19.8
Risk score
1.5
Published
7 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
This exploit rebuilds and exploit the CVE-2019-16098 which is in driver Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. Instead of hardcoded base address of Ntoskrnl.exe, I calculated it dynamically and recalulated the fields offsets
Local privilege escalation PoC exploit for CVE-2019-16098
Similar Vulnerabilities
MSI Radix AXE6600 v781521 Command Injection via openvpn function
MSI Radix AXE6600 v781521 Command Injection via macfilter
MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
MSI Radix AXE6600 v781521 Command Injection via porTrigger function
MSI Radix AXE6600 v781521 Command Injection via portFw function
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2019-16098"