What is CVE-2021-44852?

CVE-2021-44852 is a high-severity vulnerability in Biostar Racing Gt Evo. CVSS score: 7.8/10. Published 2022-01-01.

How severe is CVE-2021-44852?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2021-44852 known to be exploited?

9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Biostar Racing Gt Evo

CVE-2021-44852

An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations (or call an arbitrary address), leading to execution of arbitrary code. This is associated with 0x226040, 0x226044, and 0x226000.

EPSS: 0.008 (52.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Biostar Racing_gt_evo — versions 2.1.1905.1700
N/a — versions n/a

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-44852?: CVE-2021-44852 is a high-severity vulnerability in Biostar Racing Gt Evo. CVSS score: 7.8/10. Published 2022-01-01.
How severe is CVE-2021-44852?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2021-44852 known to be exploited?: 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.