A critical cryptographic signature verification flaw in the Phison PS3111-S11 controller firmware allows an attacker to execute arbitrary malicious code on the storage controller.

The firmware fails to anchor the public RSA modulus in immutable hardware storage, instead relying on a modulus embedded within the firmware image itself. This allows a privileged attacker to sign tampered firmware with an arbitrary key pair and bypass the signature verification mechanism entirely.

Successful exploitation grants an attacker full control over the SSD controller, which operates below the operating system level. This could lead to persistent, undetectable data theft, the creation of hidden storage areas for malware, or complete system compromise. Given the CVSS score of 8.2, this vulnerability represents a high-severity risk that could undermine the integrity of the entire computing environment.

Immediate Action: Apply the vendor-provided firmware update for the affected SBFQT1.3 version immediately upon release from your specific SSD manufacturer.

Proactive Monitoring: Monitor storage devices for unexpected firmware version changes or anomalous I/O behavior that may indicate unauthorized persistence at the controller level.

Compensating Controls: Ensure that physical access to servers and workstations is strictly controlled, as this exploit requires privileged access to the local hardware to deploy the malicious firmware.

Public Exploit Available: Yes — a published proof-of-concept exists, attributed to the Psychite tool repository linked in the official CVE references.

This vulnerability presents a severe threat to hardware integrity due to the bypass of fundamental firmware security controls. Organizations using SSDs equipped with the Phison PS3111-S11 controller must prioritize identifying affected hardware and applying firmware patches as soon as they become available from their respective hardware vendors. Failure to remediate allows for a permanent, low-level persistence mechanism that is extremely difficult to detect or remove once established.