Vulnerability Description
An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Accops | Hyworks Dvm Tools | < 3.3.1.105 |
Related Weaknesses (CWE)
References
- https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalationExploitTechnical DescriptionThird Party Advisory
- https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalationExploitTechnical DescriptionThird Party Advisory
FAQ
What is CVE-2021-42682?
CVE-2021-42682 is a vulnerability with a CVSS score of 8.8 (HIGH). An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial o...
How severe is CVE-2021-42682?
CVE-2021-42682 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-42682?
Check the references section above for vendor advisories and patch information. Affected products include: Accops Hyworks Dvm Tools.