CWE Code: 269
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Privilege Management
Summary: the driver in micro-star msi afterburner 4.6.2.15658 (aka rtcore64.sys and rtcore32.sys) allows any authenticated user to read and write to arbitrary memory, i/o ports, and msrs. this can be exploited for privilege escalation, code execution under high privileges, and information disclosure. these signed drivers can also be used to bypass the microsoft driver-signing policy to deploy malicious code.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-09-11
Last Modified Date: 2019-09-13