CVE-2020-14974 PoC — IOBit Unlocker 安全漏洞

Source

https://github.com/Aterror2be/CVE-2020-14974

Associated Vulnerability

Title:IOBit Unlocker 安全漏洞 (CVE-2020-14974)
Description:The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold a handle, via IOCTL code 0x222124.

Description

A simple POC that demonstrates A vulnerability found in IObitUnlocker 1.1.2 that leverages IOCTL codes found it its vulnerable driver (IObitUnlocker.sys), providing ability to unlock, delete, rename, copy, and move running files and a low privileged user.

Readme

# CVE-2020-14974
A simple POC that demonstrates A vulnerability found in IObitUnlocker 1.1.2 that leverages IOCTL codes found it its vulnerable driver (IObitUnlocker.sys), providing ability to unlock, delete, rename, copy, and move running files as a low privileged user.

## Resources
https://nvd.nist.gov/vuln/detail/CVE-2020-14974

https://theevilbit.github.io/posts/iobit_unlocker_lpe/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!