VulnerabilityModified

CVE-2020-36603

The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows…

MEDIUM 6.5EPSS 0.62%

Does this matter?

Lower severity and a low EPSS score (0.62%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS: 0.62% probability · 48th percentile
CISA KEV: Not listed
Weakness: CWE-269
Affected: hoyoverse/mhyprot2
Source: cve@mitre.org

References

https://github.com/kagurazakasanae/Mhyprot2DrvControlThird Party Advisory
https://github.com/kkent030315/evil-mhyprot-cliThird Party Advisory
https://web.archive.org/web/20211204031301/https://www.godeye.club/2021/05/20/001-disclosure-mhyprot.htmlExploit, Third Party Advisory
https://www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.htmlExploit, Third Party Advisory
https://www.vice.com/en/article/y3p35w/hackers-are-using-anti-cheat-in-genshin-impact-to-ransom-victimsExploit, Press/Media Coverage, Third Party Advisory
https://github.com/kagurazakasanae/Mhyprot2DrvControlThird Party Advisory
https://github.com/kkent030315/evil-mhyprot-cliThird Party Advisory
https://web.archive.org/web/20211204031301/https://www.godeye.club/2021/05/20/001-disclosure-mhyprot.htmlExploit, Third Party Advisory
https://www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.htmlExploit, Third Party Advisory
https://www.vice.com/en/article/y3p35w/hackers-are-using-anti-cheat-in-genshin-impact-to-ransom-victimsExploit, Press/Media Coverage, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.