CVE-2024-39251

Published: Jul 1, 2024Modified: Jun 17, 2026Deferred

10.0

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests.

Related CWEs

CWE-782

Exposed IOCTL with Insufficient Access Control

The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

References (2)

https://github.com/Souhardya/Exploit-PoCs/tree/main/ThundeRobot_Control_center

Source: cve@mitre.org

https://github.com/Souhardya/Exploit-PoCs/tree/main/ThundeRobot_Control_center

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.