CVE-2021-21786: High severity iobit advanced systemcare vulnerability

Published Jul 7, 2021

Updated

A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can lead to increased privileges. An attacker can send a malicious IRP to trigger this vulnerability.

Affected Software

1 affected component

IObit Advanced SystemCare Ultimate=14.2.0.220

Event History

Jul 7, 2021

CVE Published

via MITRE·04:49 PM

Data Sourced

via MITRE·04:49 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21786?

CVE-2021-21786 is a privilege escalation vulnerability in IOBit Advanced SystemCare Ultimate 14.2.0.220.

How does CVE-2021-21786 affect IOBit Advanced SystemCare Ultimate?

CVE-2021-21786 can lead to increased privileges when a specially crafted I/O request packet (IRP) is sent to the software.

What is the severity of CVE-2021-21786?

CVE-2021-21786 has a severity rating of 7.8 (high).

How can an attacker exploit CVE-2021-21786?

An attacker can exploit CVE-2021-21786 by sending a malicious IRP to trigger the vulnerability.

Is there a fix available for CVE-2021-21786?

At the moment, there is no specific fix available for CVE-2021-21786. It is recommended to follow the vendor's security advisory for updates.