CVE-2021-44903 : Security Advisory and Response

Micro-Star International (MSI) Center Pro <= 2.0.16.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in various driver components.

Understanding CVE-2021-44903

What is CVE-2021-44903?

The CVE-2021-44903 vulnerability affects Micro-Star International (MSI) Center Pro <= 2.0.16.0, leading to Privilege Escalation (LPE/EoP) risks through specific IOCTL requests.

The Impact of CVE-2021-44903

The vulnerabilities in atidgllk.sys, atillk64.sys, MODAPI.sys, and other drivers could allow attackers to elevate privileges on affected systems.

Technical Details of CVE-2021-44903

Vulnerability Description

The vulnerability resides in multiple driver components, posing a risk of Privilege Escalation by manipulating IOCTL requests.

Affected Systems and Versions

Product: Micro-Star International (MSI) Center Pro
Version: <= 2.0.16.0

Exploitation Mechanism

The vulnerabilities are triggered by sending specific IOCTL requests to the drivers mentioned.

Mitigation and Prevention

Immediate Steps to Take

Apply security patches from Micro-Star International to address the vulnerabilities.
Monitor system logs for any suspicious IOCTL requests.
Implement the principle of least privilege to limit potential impact.

Long-Term Security Practices

Regularly update all software and drivers to mitigate security risks.
Conduct security assessments and audits to identify and remediate vulnerabilities.

Patching and Updates

Stay informed about security updates from Micro-Star International.
Immediately deploy patches to ensure the protection of the system.