CyberRota Analysis
AI-GeneratedThe FluxInk Color Management Driver in Windows versions prior to 1.0.7.6 is vulnerable to local privilege escalation, allowing standard users to map arbitrary physical memory, which could lead to unauthorized access and control over system resources. Organizations using affected Windows systems, particularly those with standard user accounts, should prioritize updating to the fixed driver version to mitigate the risk of exploitation. Immediate action is recommended for environments that rely on this driver for color management functionality.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from Lenovo directly.