Jason Huang

Name of the Vulnerable Software and Affected Versions Moxa MxGeneralIo (affected versions not specified) Description A utility, MxGeneralIo, for Moxa’s industrial x86 computers has an exposed IOCTL with insufficient access control. The utility exposes IOCTL methods that allow direct read and write access to MSR and system memory. A local attacker with high privileges could abuse these interfaces to perform unauthorized operations. Successful exploitation may result in privilege escalation on Windows 7 systems or cause a system crash (BSoD) on Windows 10 and 11 systems, leading to a denial-of-service condition. The vulnerability could slightly affect the confidentiality and integrity of the device, but availability might be heavily impacted. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Portwell Engineering Toolkits version 4.8.2 **Description** An improper restriction of operations within the bounds of a memory buffer in the Portwell Engineering Toolkits driver allows a local authenticated attacker to read and write to arbitrary memory. This could lead to a denial-of-service condition or escalation of privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.