CVE-2026-126785: rmalright TR-VISION HOME IOCTL WFanManager.sys sub_11504 default permission
A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about this disclosure but did not respond in any way.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running rmalright TR-VISION HOME 2.0.5 are affected, specifically through the WFanManager.sys IOCTL handler.
What level of access does an attacker need?
Exploitation requires local access and low privileges. No user interaction is required.
What is the potential impact?
The issue can lead to compromise of confidentiality, integrity, and availability, with a scope change indicated by the supplied severity vector.
Is a vendor fix or workaround available?
The available information does not identify a fix or workaround. The vendor was contacted before disclosure but did not respond.