Lucene search
PRIOn knowledge basePRION:CVE-2020-36603HistorySep 14, 2022 - 10:15 p.m.
Code injection
2022-09-1422:15:00
PRIOn knowledge base
www.prio-n.com
2
hoyoverse
genshin impact
mhyprot2.sys
code injection
anti-cheat
driver
windows
nvd
arbitrary code
system privileges
microsoft
The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be installed by a user with administrative privileges.
References
github.com/kagurazakasanae/Mhyprot2DrvControl
github.com/kkent030315/evil-mhyprot-cli
web.archive.org/web/20211204031301/https://www.godeye.club/2021/05/20/001-disclosure-mhyprot.html
www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.html
www.vice.com/en/article/y3p35w/hackers-are-using-anti-cheat-in-genshin-impact-to-ransom-victims
Related
cvelist
cvelist
CVE-2020-36603
2020-10-15 00:00:00
nvd
nvd
CVE-2020-36603
2022-09-14 22:15:11
cve
cve
CVE-2020-36603
2022-09-14 22:15:11