Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-84696

Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands

Description

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phison Electronics Corporation PS3111-S11 Controller Firmware

Default version status: unaffected

  • SBFQT1.3affected

References