CVE-2024-33221

HIGH Year: 2024
CVSS v3 Score
7.8
High
Weakness Type
CWE-782
View all →

Vulnerability Description

An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Related Vulnerabilities

CVE-2021-21551

HIGH
CVSS:7.8(High)

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user acce...

CWE-7822021

CVE-2021-25695

HIGH
CVSS:7.8(High)

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program exe...

CWE-7822021

CVE-2024-33218

HIGH
CVSS:7.8(High)

An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL ...

CWE-7822024

CVE-2024-33219

HIGH
CVSS:7.8(High)

An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

CWE-7822024

CVE-2025-26125

HIGH
CVSS:7.3(High)

An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.

CWE-7822025

CVE-2024-33222

HIGH
CVSS:8.4(High)

An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

CWE-7822024