CVE-2021-42993

ALTO 8.8CVE-2021-42993 · Published 07/12/2021 · updated 17/06/2026

En resumen

CVE-2021-42993 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a flexihub (flexihub).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.50%, mayor que el 42.7% de las vulnerabilidades.
Solución: actualizar a 5.3.14268 o posterior.

Package	Affected versions	Patched versions
flexihub flexihub	`> 2.0.4340, < 5.3.14268`	`5.3.14268`

Description

FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

References

sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services · Exploit

Más vulnerabilidades de flexihub

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free