An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request.
References
| Link | Resource |
|---|---|
| https://github.com/Faintsnow/HE | Broken Link |
| https://github.com/cwjchoi01/CVE-2025-66678 | Exploit Third Party Advisory |
Configurations
History
09 Mar 2026, 17:33
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| First Time |
Faintsnow
Faintsnow hardware Read \& Write Utility |
|
| CPE | cpe:2.3:a:faintsnow:hardware_read_\&_write_utility:*:*:*:*:*:*:*:* | |
| References | () https://github.com/Faintsnow/HE - Broken Link | |
| References | () https://github.com/cwjchoi01/CVE-2025-66678 - Exploit, Third Party Advisory |
05 Mar 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-89 |
04 Mar 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-04 17:16
Updated : 2026-03-09 17:33
NVD link : CVE-2025-66678
Mitre link : CVE-2025-66678
CVE.ORG link : CVE-2025-66678
JSON object : View
Products Affected
faintsnow
- hardware_read_\&_write_utility
CWE
NVD-CWE-noinfo
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')