CVE-2021-44852

Exploit

EPSS 1.86%
Veröffentlicht 01.01.2022 06:15:07
Zuletzt bearbeitet 21.11.2024 06:31:36
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations (or call an arbitrary address), leading to execution of arbitrary code. This is associated with 0x226040, 0x226044, and 0x226000.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Biostar ≫ Racing Gt Evo Version2.1.1905.1700

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.86%	0.814

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

https://nephosec.com/biostar-exploit/

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2021-44852

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-44852

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-44852

EUVD