CVE-2021-41285: micron ballistix_memory_overview_display_utility
Vulnerability summary
CVE-2021-41285 is a high (CVSS 7.8) vulnerability in micron ballistix_memory_overview_display_utility. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 46% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 04-10-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call (mapping physical memory into a virtual address space). Attackers could exploit this issue to achieve local privilege escalation to NT AUTHORITY\SYSTEM.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.56%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
0.00 pp
From 0.56% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Development
Maturity: poc
Exploit Reference (voidsec.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Micron1 product
1 vendor · 1 product