CVEvulnerability

CVE-2021-42686

8.8 HIGH Published 2021-12-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-190

Description

An Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

Affected configurations

• accops hyworks windows client (< 3.2.8.200)

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References