CVE-2021-21787: High severity iobit advanced systemcare vulnerability
A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL 0x9c40a0d8, the first dword passed in the input buffer is the device port to write to and the byte at offset 4 is the value to write via the OUT instruction. The OUT instruction can write one byte to the given I/O device port, potentially leading to escalated privileges of unprivileged users.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21787?
CVE-2021-21787 is a privilege escalation vulnerability in IOBit Advanced SystemCare Ultimate 14.2.0.220.
How does the vulnerability in IOBit Advanced SystemCare Ultimate 14.2.0.220 impact me?
The vulnerability allows an attacker to escalate privileges on affected systems.
What is the severity of CVE-2021-21787?
CVE-2021-21787 has a severity score of 8.8 out of 10 (high severity).
How can I fix the privilege escalation vulnerability in IOBit Advanced SystemCare Ultimate 14.2.0.220?
Update IOBit Advanced SystemCare Ultimate to the latest version to fix the vulnerability.
Where can I find more information about CVE-2021-21787?
You can find more information about CVE-2021-21787 at the following link: [https://talosintelligence.com/vulnerability_reports/TALOS-2021-1254](https://talosintelligence.com/vulnerability_reports/TALOS-2021-1254)