Privilege Escalation in Phison PS3111-S11 Controller Firmware
⚠️ CVE-Referenzen:
CVE-2026-84696
Phison Electronics Corporation - Ps3111-s11 Controller Firmware - CRITICAL - CVE-2026-84696.
The Phison PS3111-S11 controller firmware versions up to SBFQT1.3 expose a significant vulnerability that allows unauthorized access to privileged vendor unique commands via the ATA interface. This weakness arises from absent or easily defeatable authentication mechanisms, enabling attackers to circumvent a weak CRC-16 based unlock handshake. In vulnerable builds that do not enforce a VUC lock, it becomes possible for attackers to manipulate the controller memory and raw flash, effectively persisting implants through power cycles.
BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io