CVE-2026-29923
Received Received - Intake
Privilege Escalation in PowerStrip pstrip64.sys via IOCTL Memory Mapping

Publication date: 2026-04-09

Last updated on: 2026-04-14

Assigner: MITRE

Description
The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-09
Last Modified
2026-04-14
Generated
2026-06-16
AI Q&A
2026-04-09
EPSS Evaluated
2026-06-15
NVD
CVE-2026-29923
EUVD
EUVD-2026-21014
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
entech_taiwan powerstrip 3.90.736
entech_taiwan powerstrip to 3.90.736 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The vulnerability exists in the pstrip64.sys driver of EnTech Taiwan PowerStrip versions up to 3.90.736. It allows local users to escalate their privileges to SYSTEM level by sending a specially crafted IOCTL request. This request enables unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.

Impact Analysis

This vulnerability can allow an attacker with local access to gain SYSTEM-level privileges on the affected system. With SYSTEM privileges, the attacker can execute arbitrary code with the highest level of permissions, potentially leading to full system compromise, unauthorized access to sensitive data, and the ability to disable security controls.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-29923. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart