Description (CNA)
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Phison Electronics Corporation / PS3111-S11 Controller Firmware | affected SBFQT1.3 |
CWE
CWE-306
References
- https://trulycrisp.github.io/drivefirmware/phison_s11/
- https://github.com/trulycrisp/psychite
- https://github.com/trulycrisp/disksec
- https://www.vulncheck.com/advisories/phison-ps3111-s11-controller-firmware-missing-authentication-on-vendor-unique-commands
ADP enrichment
No English description supplied.
No references supplied.