Core Temp
Monthly
Arbitrary physical-memory read and write is reachable through an exposed IOCTL in the ALCPU Core Temp Windows kernel driver, which performs insufficient access control on that control path (CWE-782). The attack is local: an attacker needs an existing session on a Windows host where the Core Temp driver is installed and loaded, after which invoking the affected IOCTL can yield physical-memory read/write and, in practice, kernel/SYSTEM-level compromise. Severity is moderate on paper (vendor CVSS 6.7, assessed 6.7) but the impact is total once the interface is reached; the vendor vector marks PR:H while the independent assessment scores PR:L based on the insufficient-access-control description, and that privilege discrepancy is not resolved by the available sources. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the trigger conditions are only partially described in the available sources.
Arbitrary physical-memory read and write is reachable through an exposed IOCTL in the ALCPU Core Temp Windows kernel driver, which performs insufficient access control on that control path (CWE-782). The attack is local: an attacker needs an existing session on a Windows host where the Core Temp driver is installed and loaded, after which invoking the affected IOCTL can yield physical-memory read/write and, in practice, kernel/SYSTEM-level compromise. Severity is moderate on paper (vendor CVSS 6.7, assessed 6.7) but the impact is total once the interface is reached; the vendor vector marks PR:H while the independent assessment scores PR:L based on the insufficient-access-control description, and that privilege discrepancy is not resolved by the available sources. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the trigger conditions are only partially described in the available sources.