CVE-2021-44852: High severity biostar racing gt evo vulnerability

Published Jan 1, 2022

Updated

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations (or call an arbitrary address), leading to execution of arbitrary code. This is associated with 0x226040, 0x226044, and 0x226000.

Affected Software

1 affected component

Biostar RACING GT Evo=2.1.1905.1700

Event History

Jan 1, 2022

CVE Published

via MITRE·05:11 AM

Data Sourced

via MITRE·05:11 AM

Description

Data Sourced

via NVD·06:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Can this be exploited remotely without prior access to the system?

The reported attack vector is local. An attacker needs to run a low-integrity process on a system with the affected driver and does not require user interaction.

Which driver operations are associated with the issue?

The issue is associated with IOCTLs 0x226040, 0x226044, and 0x226000. These operations can be used to read or write arbitrary physical memory or call an arbitrary address.

What is the likely impact after successful exploitation?

Successful exploitation can lead to arbitrary code execution. The CVSS vector indicates high impact to confidentiality, integrity, and availability.

CVE-2021-44852: High severity biostar racing gt evo vulnerability

Affected Software

Event History

Frequently Asked Questions

Can this be exploited remotely without prior access to the system?

Which driver operations are associated with the issue?

What is the likely impact after successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Can this be exploited remotely without prior access to the system?

Which driver operations are associated with the issue?

What is the likely impact after successful exploitation?