CVE-2021-41285

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call (mapping physical memory into a virtual address space). Attackers could exploit this issue to achieve local privilege escalation to NT AUTHORITY\SYSTEM.

• https://github.com/VoidSec/Exploit-Development/blob/master/windows/x64/kernel/crucial_Ballistix_MOD_Utility_v.2.0.2.5/crucial_Ballistix_MOD_Utility_v.2.0.2.5_memory_dump_PoC.cppExploit, Third Party Advisory
• https://voidsec.com/crucial-mod-utility-lpe-cve-2021-41285/Exploit, Third Party Advisory
• https://github.com/VoidSec/Exploit-Development/blob/master/windows/x64/kernel/crucial_Ballistix_MOD_Utility_v.2.0.2.5/crucial_Ballistix_MOD_Utility_v.2.0.2.5_memory_dump_PoC.cppExploit, Third Party Advisory
• https://voidsec.com/crucial-mod-utility-lpe-cve-2021-41285/Exploit, Third Party Advisory

Published

Oct 4, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41278Functions SDK for EdgeX is meant to provide all the plumbing…5.7
• CVE-2021-41279BaserCMS is an open source content management system with a …8.8
• CVE-2021-4128When transitioning in and out of fullscreen mode, a graphics…6.5
• CVE-2021-41280Sharetribe Go is a source available marketplace software. In…9.8
• CVE-2021-41281Synapse is a package for Matrix homeservers written in Pytho…7.5
• CVE-2021-41282diag_routes.php in pfSense 2.5.2 allows sed data injection. …8.8
• CVE-2021-41286Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-si…7.8
• CVE-2021-41288Zoho ManageEngine OpManager version 125466 and below is vuln…9.8
• CVE-2021-41289ASUS P453UJ contains the Improper Restriction of Operations …6.3
• CVE-2021-4129Mozilla developers and community members Julian Hector, Rand…9.8
• CVE-2021-41290ECOA BAS controller suffers from an arbitrary file write and…9.8
• CVE-2021-41291ECOA BAS controller suffers from a path traversal content di…7.5