Privilege Escalation in IOBit Advanced SystemCare Ultimate by IOBit
CVE-2021-21787

8.8HIGH

Key Information:

Vendor

Iobit

Status
Vendor
CVE Published:
7 July 2021

What is CVE-2021-21787?

A vulnerability exists in IOBit Advanced SystemCare Ultimate that allows unprivileged users to escalate their privileges through improper handling of Privileged I/O write requests. Specifically, during the IOCTL process, a crafted input buffer can lead to unauthorized access to privileged actions, enabling attackers to execute commands with elevated rights.

Affected Version(s)

Iobit IOBit Advanced SystemCare Ultimate 14.2.0.220

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.