CVE-2021-28685

Katalog CVE

CVSS 7.8 · High EPSS 0,32%

Kerentanan pada asus gputweak ii. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory (by calling one of several driver routines that map physical memory into the virtual address space of the calling process) and to interact with MSR registers. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM privileges via a DeviceIoControl.

Rincian

Terbit di NVD

8 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/ advisory vendor
• https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0 advisory pihak ketiga