Formatter Silicon Power V.3.7.0.0 -ps2251-.162 ✯

We disclose a CVE-worthy issue (ID requested): The handshake in Formatter v3.7.0.0 lacks authentication. A malicious USB device emulating a PS2251 with .162 signature can receive the tool’s payload and escalate to ring-0 execution on the host via a crafted SCSI request. Proof-of-concept code is provided in Appendix B.

| Metric | Before Format | After Format | |--------|--------------|---------------| | Sequential Write (MB/s) | 14.2 ± 2.1 | 87.5 ± 3.4 | | 4K Random Write IOPS | 412 | 4,018 | | Access Latency (ms) | 2.4 | 0.3 |

Observation: The tool triggers a full low-level format, not a quick format. Formatter Silicon Power v.3.7.0.0 -PS2251-.162

Before running the tool, double-check that your drive indeed has the PS2251-.162 controller. Use ChipGenius (Windows) or lsusb (Linux).

If you see “PS2251-03” or “PS2251-07”, do NOT use v.3.7.0.0. You need a newer version. We disclose a CVE-worthy issue (ID requested): The

The tag -PS2251-.162 is the most critical part of the keyword. It refers to a specific Phison controller chip found inside the Silicon Power drive.

The PS2251-03 (often misreported as PS2251-.162 due to a firmware string truncation bug) integrates a 32-bit microcontroller, 4KB SRAM, and a 16-bit ECC engine. If you see “PS2251-03” or “PS2251-07”, do NOT use v

Download the executable (usually named SP_Formatter_v.3.7.0.0.exe or similar). Warning: Only download from Silicon Power’s official support site or reputable tech forums (like USBDev.ru, MyDigitalLife, or Reddit’s r/techsupport). Third-party sites may embed malware. Always scan the file with Windows Defender.

Check the file properties:

This refers to the proprietary low-level formatting utility released by Silicon Power (a Taiwanese memory manufacturer). Version 3.7.0.0 is a specific build used primarily between 2016 and 2019.