PT-2018-10060
CVE-2018-10711
·
Published
2018-10-30
·
Updated
2019-01-30
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ASRock RGBLED versions prior to 1.0.35.1
A-Tuning versions prior to 3.0.210
F-Stream versions prior to 3.0.210
RestartToUEFI versions prior to 1.0.6.2
Description
The issue allows for the execution of arbitrary ring-0 code by exposing functionality to read and write Machine Specific Registers (MSRs) through low-level drivers.
Recommendations
For ASRock RGBLED versions prior to 1.0.35.1, update to version 1.0.35.1 or later.
For A-Tuning versions prior to 3.0.210, update to version 3.0.210 or later.
For F-Stream versions prior to 3.0.210, update to version 3.0.210 or later.
For RestartToUEFI versions prior to 1.0.6.2, update to version 1.0.6.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾