FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
References
| Link | Resource |
|---|---|
| https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
| https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory |
09 Dec 2021, 15:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory | |
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:flexihub:flexihub:*:*:*:*:*:*:*:* |
|
| CWE | CWE-190 | |
| CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 8.8 |
07 Dec 2021, 20:31
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-07 20:15
Updated : 2024-11-21 06:28
NVD link : CVE-2021-42993
Mitre link : CVE-2021-42993
CVE.ORG link : CVE-2021-42993
JSON object : View
Products Affected
flexihub
- flexihub
microsoft
- windows
CWE
CWE-190
Integer Overflow or Wraparound