VULNERABILITY INTELLIGENCE

CVE-2021-42686

CVSS score8.8 HIGH
EPSS probability0.50%
CISA KEVNot currently listed
Published2021-12-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

An Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

Weakness classification

  • nvd@nist.gov: CWE-190

Primary references