Description
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phison Electronics | PS3111-S11 Controller Firmware | SBFQT1.3 | — |
References
- https://trulycrisp.github.io/drivefirmware/phison_s11/ technical-description
- https://github.com/trulycrisp/psychite exploit
- https://github.com/trulycrisp/disksec exploit
- VulnCheck Advisory: Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands third-party-advisory