CVE-2020-36603 Privilege escalation in n/a
Local attackers can execute arbitrary code with SYSTEM privileges via the Genshin Impact anti-cheat driver due to inadequate restriction of unprivileged function calls.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-36603?
CVE-2020-36603 is a medium-severity vulnerability in n/a, published on 14 Sep 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be installed by a user with administrative privileges.
Weakness: CWE-269
Which versions are affected by CVE-2020-36603?
It affects 1 product.
Products include Hoyoverse Mhyprot2.
How do I fix CVE-2020-36603?
No fix has been published for CVE-2020-36603 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-36603 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-36603 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-vwh6-r56v-wq74.