CVE-2021-27965
CRITICALMSI Dragon Center <2.0.98.0 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2021-27965. PoCs published by mathisvickie, fengjixuchui, Jeromeyoung.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-27965, a stack-based buffer overflow in the MsIo driver. The exploit leverages ROP gadgets to achieve arbitrary memory writes and ultimately escalate privileges.
Description
The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request.
Exploits (3)
This repository contains a functional exploit for CVE-2021-27965, a stack-based buffer overflow in the MsIo driver. The exploit leverages ROP gadgets to achieve arbitrary memory writes and ultimately escalate privileges.
This repository contains a functional exploit for CVE-2021-27965, a buffer overflow in the MsIo64.sys driver allowing local privilege escalation via crafted IOCTL requests. The exploit includes a kernel payload and demonstrates the vulnerability on Windows 7 SP1 64-bit.
This repository contains a functional exploit for CVE-2021-27965, a stack-based buffer overflow in MSI Dragon Center's MsIo64.sys driver, leading to local privilege escalation on Windows 7 x64. The exploit demonstrates control over the instruction pointer and spawns an elevated command shell.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H