A high-severity integer overflow vulnerability in MSI Dragon Center allows a local attacker with low privileges to potentially gain full control over the affected system.

This flaw exists within the MmioWritePath function of the NTIOLib_X64.sys library, where improper handling of argument counts leads to an integer overflow. An attacker who has already achieved local access can exploit this condition to execute arbitrary code with elevated privileges.

The vulnerability carries a CVSS score of 8.8, reflecting its potential for total system compromise. Successful exploitation allows a local user to escalate privileges, leading to unauthorized data access, the installation of persistent malware, or complete disruption of system integrity and availability.

Immediate Action: As no official patch is currently available from the vendor, restrict local access to the affected machine and monitor for suspicious behavior involving the NTIOLib_X64.sys driver.

Proactive Monitoring: Audit system logs for unexpected crashes or unauthorized attempts to interface with low-level hardware drivers.

Compensating Controls: Implement strict endpoint privilege management to ensure that only authorized users can execute code locally, thereby reducing the likelihood of a malicious actor reaching the vulnerable driver.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the referenced research material.

Due to the lack of an official vendor patch and the availability of public exploit material, this vulnerability poses a significant risk to internal systems. Administrators should prioritize isolating affected systems from untrusted local users and remain vigilant for vendor-provided security updates to address the underlying driver flaw.