Gigabyte Control Center EUVD-2026-17069

Requires Gigabyte Control Center with pairing feature enabled. Unauthenticated remote attacker exploits the service over network (AV:N). No user interaction needed. Affects default installations where pairing is active.

This vulnerability presents elevated real-world risk despite high attack complexity. The CVSS vector (AV:N/AC:H/PR:N/UI:N) indicates network-reachable exploitation requiring no authentication or user interaction, delivering full system compromise (C:H/I:H/A:H). The AC:H designation suggests obstacles such as non-default configurations (pairing feature must be explicitly enabled) or race conditions, which reduces exploit reliability but does not eliminate risk. No EPSS score provided in available data, and CISA KEV status is negative, indicating no confirmed active exploitation campaigns. However, disclosure by Taiwan CERT with public advisories significantly increases exploitation likelihood as security researchers and threat actors now have detailed vulnerability information. The combination of unauthenticated network access, arbitrary file write leading to code execution, and privilege escalation potential makes this a critical concern for organizations using Gigabyte hardware with Control Center installed. SSVC factors favor prioritization: technical impact is total system compromise, and the vulnerability appears automatable once specific environmental prerequisites are met. Organizations should treat this as high priority if the affected software is deployed with pairing features enabled.

An attacker on the same network as a system running Gigabyte Control Center with pairing enabled sends crafted network requests containing directory traversal sequences to write a malicious DLL to the Windows System32 directory or a backdoored executable to a startup folder. Despite high attack complexity requiring precise knowledge of the pairing protocol and potentially specific timing conditions, successful exploitation allows immediate arbitrary code execution with system-level privileges. The attacker establishes persistent access without requiring credentials or user interaction, enabling full system compromise, data exfiltration, lateral movement to other network assets, or deployment of ransomware.