CVE-2025-66678 - Vulnerability Analysis

Overview

Nil Hardware Editor Hardware Read & Write Utility <= 1.25.11.26 contains an arbitrary read and write vulnerability caused by improper handling in HwRwDrv.sys, letting attackers execute arbitrary read and write operations remotely, exploit requires crafted request.

Severity & Score

Impact

Attackers can perform arbitrary read and write operations, potentially leading to system compromise or data manipulation.

Mitigation

Update to the latest version.

References

• https://github.com/Faintsnow/HE
• https://github.com/cwjchoi01/CVE-2025-66678

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 5, 2026

🔴 CVE-2025-66678 - Critical (9.8) An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-66678/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

GitHub Repositories(1 repo)

• https://github.com/cwjchoi01/CVE-2025-66678

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner