CVE-2018-10710

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:asrock:restart_to_uefi:*:*:*:*:*:*:*:*
cpe:2.3:a:asrock:a-tuning:*:*:*:*:*:*:*:*
cpe:2.3:a:asrock:rgbled:*:*:*:*:*:*:*:*
cpe:2.3:a:asrock:f-stream:*:*:*:*:*:*:*:*

Information

Published : 2018-10-30 11:29

Updated : 2019-10-02 17:03


NVD link : CVE-2018-10710

Mitre link : CVE-2018-10710


JSON object : View

CWE
CWE-732

Incorrect Permission Assignment for Critical Resource

Advertisement

dedicated server usa

Products Affected

asrock

  • f-stream
  • restart_to_uefi
  • rgbled
  • a-tuning