CVE-2021-29337: High severity msi dragon center vulnerability

Published Jun 21, 2021

Updated

MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate privileges via a crafted IOCTL 0x9c406104 call. This IOCTL provides the MmMapIoSpace feature for mapping physical memory.

Affected Software

1 affected component

MSI Dragon Center=2.0.104.0

Remediation

Patch Available

https://github.com/rjt-gupta/CVE-2021-29337

Event History

Jun 21, 2021

CVE Published

via MITRE·11:44 AM

Data Sourced

via MITRE·11:44 AM

Description

Frequently Asked Questions

What is the severity of CVE-2021-29337?

CVE-2021-29337 is considered a high-severity vulnerability due to its potential for privilege escalation.

How do I fix CVE-2021-29337?

To fix CVE-2021-29337, update MSI Dragon Center to the latest version that includes security patches.

What type of access does CVE-2021-29337 allow?

CVE-2021-29337 allows low-privileged users to access kernel memory, which can lead to potential privilege escalation.

What is the impact of exploiting CVE-2021-29337?

Exploitation of CVE-2021-29337 can lead to unauthorized access to sensitive information and full system compromise.

Which version of MSI Dragon Center is affected by CVE-2021-29337?

MSI Dragon Center version 2.0.104.0 is the specific version affected by CVE-2021-29337.