CVE-2021-29337

HIGH

MSI Dragon Center 2.0.104.0 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-29337. PoCs published by rjt-gupta.

AI-analyzed exploit summary The repository contains a functional exploit PoC for CVE-2021-29337, demonstrating privilege escalation via arbitrary kernel memory manipulation through the vulnerable IOCTL 0x9C406104 in MSI Dragon Center's MODAPI.sys driver.

Description

MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate privileges via a crafted IOCTL 0x9c406104 call. This IOCTL provides the MmMapIoSpace feature for mapping physical memory.

Exploits (1)

nomisec WORKING POC 31 stars
by rjt-gupta · poc
https://github.com/rjt-gupta/CVE-2021-29337

The repository contains a functional exploit PoC for CVE-2021-29337, demonstrating privilege escalation via arbitrary kernel memory manipulation through the vulnerable IOCTL 0x9C406104 in MSI Dragon Center's MODAPI.sys driver.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: MSI Dragon Center 2.0.104.0
No auth needed
Prerequisites: MSI Dragon Center installed · Low-privileged user access
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/rjt-gupta/CVE-2021-29337

Scores

CVSS v3 7.8
EPSS 0.0059
EPSS Percentile 43.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
msi/dragon_center 2.0.104.0
Published Jun 21, 2021
Tracked Since Feb 18, 2026