CVE-2024-39251

An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests.

Score

CVSS 3.1 10.0 Critical

Status

Deferred - cve@mitre.org

Published

2024-07-01

Last modified

2025-03-13

Weaknesses

CWE-782

Affected products

• Control Center (Thunderobot)

References

• https://github.com/Souhardya/Exploit-PoCs/tree/main/ThundeRobot_Control_center