CVE-2021-42988

CVE-2021-42988 is a buffer overflow vulnerability affecting Eltima USB Network Gate versions between 7.0.1370 and 9.2.2420. A local attacker can exploit this flaw by sending a specially crafted I/O Request Packet to IOCTL Handler 0x22001B. This can lead to arbitrary code execution in kernel mode or a denial of service through memory corruption and OS crashes. With a CVSS score of 8.8 (HIGH), it poses a significant risk, allowing a low-privileged local attacker to achieve high impact on confidentiality, integrity, and availability without user interaction. There is no evidence of active exploitation, nor are there public exploits available in Metasploit or ExploitDB, though it has received some community discussion and media coverage.