CVE-2021-21787
First published: Wed Jul 07 2021(Updated: )
A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL 0x9c40a0d8, the first dword passed in the input buffer is the device port to write to and the byte at offset 4 is the value to write via the OUT instruction. The OUT instruction can write one byte to the given I/O device port, potentially leading to escalated privileges of unprivileged users.
Credit: talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IOBit Advanced SystemCare Ultimate | =14.2.0.220 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-21787?
CVE-2021-21787 is a privilege escalation vulnerability in IOBit Advanced SystemCare Ultimate 14.2.0.220.
How does the vulnerability in IOBit Advanced SystemCare Ultimate 14.2.0.220 impact me?
The vulnerability allows an attacker to escalate privileges on affected systems.
What is the severity of CVE-2021-21787?
CVE-2021-21787 has a severity score of 8.8 out of 10 (high severity).
How can I fix the privilege escalation vulnerability in IOBit Advanced SystemCare Ultimate 14.2.0.220?
Update IOBit Advanced SystemCare Ultimate to the latest version to fix the vulnerability.
Where can I find more information about CVE-2021-21787?
You can find more information about CVE-2021-21787 at the following link: [https://talosintelligence.com/vulnerability_reports/TALOS-2021-1254](https://talosintelligence.com/vulnerability_reports/TALOS-2021-1254)
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/iobit
- canonical/iobit advanced systemcare ultimate
- version/iobit advanced systemcare ultimate/14.2.0.220