CVE-2021-31727 - CVE House
Back to Database
Status published High CVE-2021-31727

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150...

Vulnerability Description

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to \.\ZemanaAntiMalware, register with the driver using IOCTL 0x80002010 and send these IOCTL's to escalate privileges by overwriting the boot sector or overwriting critical code in the pagefile.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-31727

Credits & Attribution

No credits recorded in the NVD database.

References

More from malwarefox

View All →
CVE-2021-31728
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150...
High 7.8
CVE-2018-6606
An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access...
High 7.8
CVE-2018-6593
An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access...
High 7.8
CVE-2018-5714
In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local...
High 7.8
CVE-2018-5713
In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local...
High 7.8

Affected Vendor

Affected Software

antimalware
Vulnerable Versions:
2.74.0.150

Timeline

Official Publish: May 17th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.