cve/2018/CVE-2018-18537.md

CVE-2018-18537

Description

The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.

POC

Reference

• http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2018/Dec/34

Github

• https://github.com/hfiref0x/KDU