A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
References
| Link | Resource |
|---|---|
| https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
| https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
Configurations
History
21 Nov 2024, 06:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory |
09 Dec 2021, 14:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory | |
| CWE | CWE-120 | |
| CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 8.8 |
| CPE | cpe:2.3:a:accops:hyworks_windows_client:*:*:*:*:*:*:*:* |
07 Dec 2021, 22:46
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-07 21:15
Updated : 2024-11-21 06:27
NVD link : CVE-2021-42683
Mitre link : CVE-2021-42683
CVE.ORG link : CVE-2021-42683
JSON object : View
Products Affected
accops
- hyworks_windows_client
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')