Jason Huang

Name of the Vulnerable Software and Affected Versions Moxa MxGeneralIo (affected versions not specified) Description A utility, MxGeneralIo, for Moxa’s industrial x86 computers has an exposed IOCTL with insufficient access control. The utility exposes IOCTL methods that allow direct read and write access to MSR and system memory. A local attacker with high privileges could abuse these interfaces to perform unauthorized operations. Successful exploitation may result in privilege escalation on Windows 7 systems or cause a system crash (BSoD) on Windows 10 and 11 systems, leading to a denial-of-service condition. The vulnerability could slightly affect the confidentiality and integrity of the device, but availability might be heavily impacted. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Portwell Engineering Toolkits version 4.8.2 **Description** An Improper Restriction of Operations within the Bounds of a Memory Buffer issue exists in Portwell Engineering Toolkits. A local authenticated attacker could potentially read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation may lead to escalation of privileges or a denial-of-service condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.