Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-26943. PoCs published by tandasat.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2021-26943, targeting a vulnerability in System Management Mode (SMM) to achieve arbitrary code execution in SMRAM. The exploit patches the SMST->SmmLocateProtocol function pointer and triggers shellcode execution via SMI.
Description
The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3).
Exploits (1)
This is a proof-of-concept exploit for CVE-2021-26943, targeting a vulnerability in System Management Mode (SMM) to achieve arbitrary code execution in SMRAM. The exploit patches the SMST->SmmLocateProtocol function pointer and triggers shellcode execution via SMI.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H