high7.5
CVE-2021-47786
Redragon Gaming Mouse driver contains a kernel-level vulnerability that allows attackers to trigger a denial of service by sending malformed IOCTL requests.
Impact
Redragon Gaming Mouse driver contains a kernel-level vulnerability that allows attackers to trigger a denial of service by sending malformed IOCTL requests. Attackers can send a crafted 2000-byte buffer with specific byte patterns to the REDRAGON_MOUSE device to crash the kernel driver.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redragon | M725-Lit Firmware | All versions |
| Redragon | M617-Lit Firmware | All versions |
| Redragon | M910-Ks Firmware | All versions |
| Redragon | M801p-Rgb Firmware | All versions |
| Redragon | M602-Ks Firmware | All versions |
| Redragon | M914w-Rgb Firmware | All versions |
| Redragon | M816-Pro Firmware | All versions |
| Redragon | M602a-Rgb Firmware | All versions |
| Redragon | M721 Firmware | All versions |
| Redragon | M602aw-Rgb Firmware | All versions |
| Redragon | M915rgb-Wl Firmware | All versions |
| Redragon | M712-Rgb Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Quadron-Research-Lab/Kernel_Driver_bugs/tree/main/REDRAGON_MOUSE
- https://www.exploit-db.com/exploits/50322
- https://www.redragonzone.com/
- https://www.vulncheck.com/advisories/redragon-gaming-mouse-redragonmousesys-denial-of-service-poc
- https://www.exploit-db.com/exploits/50322