PT-2022-12246 · Biostar · Biostar Racing Gt Evo

Mike Alfaro · Published 2022-01-01 · Updated 2023-08-08 · CVE-2021-44852

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Biostar RACING GT Evo version 2.1.1905.1700

Description An issue was discovered in BS RCIO64.sys. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations, or call an arbitrary address, leading to execution of arbitrary code. This issue is associated with specific IOCTL codes.

Recommendations For Biostar RACING GT Evo version 2.1.1905.1700, consider restricting access to the BS RCIO64.sys driver to prevent low-integrity processes from opening its device object and issuing malicious IOCTLs. As a temporary workaround, consider disabling the driver until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2021-44852

Affected Products

Biostar Racing Gt Evo

References · 7

• 🔥❌ https://github.com/expFlash/CVE-2021-44852 · Exploit, Deleted
• 🔥❌ https://github.com/Exploitables/CVE-2021-44852 · Exploit, Deleted
• 🔥 https://nephosec.com/biostar-exploit · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-44852 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44852 · Vendor Advisory
• https://t.me/cibsecurity/34814 · Telegram Post
• https://t.me/cvenotify/25299 · Telegram Post