Privilege Escalation Vulnerability in EnTech Taiwan PowerStrip Software
CVE-2026-29923

7.8HIGH

Key Information:

Vendor

EnTech Taiwan

Status
PowerStrip
Vendor
CVE Published:
9 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-29923?

The pstrip64.sys driver in EnTech Taiwan PowerStrip versions 3.90.736 and earlier is susceptible to a privilege escalation vulnerability. By crafting a specific IOCTL request, local users can gain SYSTEM privileges. This exploit enables unprivileged users to map physical memory into their address space and manipulate essential kernel structures, potentially leading to significant security breaches. Proper mitigating measures should be implemented to safeguard against this vulnerability.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-29923
Created by athenasec16

References

https://entechtaiwan.com/util/ps.shtm
https://packetstorm.news/files/id/218394/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.