Approved changes feed: RSS · Atom

cpe:2.3:a:msi:dragon_center:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMsi (1898d962-1a16-548a-b76c-6d794ed65d65)
ProductDragon Center (7f8f0277-6c79-54a2-b8d1-c7104bc8ec97)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12227 vulnerable 2026-06-03 14:54:15.873281 MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference
MEDIUM (5.5)
A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. Upgrading to version 2.0.148.0 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2024-12-05T13:31:05.008Z
Updated: 2024-12-05T15:39:52.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44901 vulnerable 2026-06-03 14:45:37.573127 Details available
Micro-Star International (MSI) Dragon Center <= 2.0.116.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests.
Published: 2022-02-04T10:59:51.000Z
Updated: 2024-08-04T04:32:13.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27965 vulnerable 2026-06-03 14:44:17.109409 Details available
The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request.
Published: 2021-03-05T01:53:46.000Z
Updated: 2024-08-03T21:33:17.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13149 vulnerable 2026-06-03 14:41:36.324311 Details available
Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming laptops, allows local authenticated users to overwrite system files and gain escalated privileges. One attack method is to change the Recommended App binary within App.json. Another attack method is to use this part of %PROGRAMDATA% for mounting an RPC Control directory.
Published: 2020-05-18T19:39:23.000Z
Updated: 2024-08-04T12:11:19.095Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.