CVE-2021-42993

High

Description

FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

SeverityHigh
CVSS8.8
Exploit probability—
ProductFlexihub
PublishedDec 7, 2021
First seenDec 7, 2021

How to fix

Update
  • flexihub flexihub5.3.14268 or later

Affected products

ProductAffected versionsFixed in
flexihub flexihub2.0.4340 < v < 5.3.142685.3.14268

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.