CVE-2021-41285

Katalog CVE

CVSS 7.8 · High EPSS 0,56%

Kerentanan pada micron ballistix memory overview display utility. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call (mapping physical memory into a virtual address space). Attackers could exploit this issue to achieve local privilege escalation to NT AUTHORITY\SYSTEM.

Rincian

Terbit di NVD

4 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 45,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/VoidSec/Exploit-Development/blob/master/windows/x64/kernel/crucial_Ballistix_MOD_Utility_v.... exploit · advisory pihak ketiga
• https://voidsec.com/crucial-mod-utility-lpe-cve-2021-41285/ exploit · advisory pihak ketiga