Cyber Resilience

CVE-2021-44852

HighPublic PoC

Published: 01 January 2022

Published
01 January 2022
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0186 83.4th percentile
Risk Priority 17 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-44852 is a high-severity an unspecified weakness vulnerability in Biostar Racing Gt Evo. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 16.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations (or call an arbitrary address), leading to…

more

execution of arbitrary code. This is associated with 0x226040, 0x226044, and 0x226000.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

biostar
racing gt evo
2.1.1905.1700

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References