CVE-2026-84696 PUBLISHED

Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands

Assigner: VulnCheck
Reserved: 01.09.2026 Published: 02.09.2026 Updated: 02.09.2026

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles.

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS Score: 9.3

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Local	Confidentiality	High	Confidentiality	High
Attack Complexity	Low	Integrity	High	Integrity	High
Attack Requirements	None	Availability	High	Availability	High
Privileges Required	High
User Interaction	None

CVSS 4.0

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 8.2

Attack Vector	Local	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	High	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Phison Electronics Corporation
Product	PS3111-S11 Controller Firmware
Versions	Default: unaffected Version SBFQT1.3 is affected

CVE-2026-84696 PUBLISHED

Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands

Metrics

Product Status

Credits

References

Problem Types