CVE-2018-10711 is a high-severity vulnerability affecting ASRock RGBLED, A-Tuning, F-Stream, and RestartToUEFI software. The included low-level drivers (AsrDrv101.sys and AsrDrv102.sys) expose functionality to read and write Machine Specific Registers (MSRs). This flaw allows a local attacker with low privileges to execute arbitrary ring-0 code, leading to a complete compromise of confidentiality, integrity, and availability. While not actively exploited in the wild, a public exploit (EDB-45716) exists, and the vulnerability has garnered some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.0.210CPE matchmatch criteria | cpe:2.3:a:asrock:a-tuning:*:*:*:*:*:*:*:* | ||
< 3.0.210CPE matchmatch criteria | cpe:2.3:a:asrock:f-stream:*:*:*:*:*:*:*:* | ||
< 1.0.6.2CPE matchmatch criteria | cpe:2.3:a:asrock:restart_to_uefi:*:*:*:*:*:*:*:* | ||
< 1.0.35.1CPE matchmatch criteria | cpe:2.3:a:asrock:rgbled:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.