Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gmfc-jwm3-239r

Опубликовано: 03 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.2

Описание

Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected security processes.

Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected security processes.

EPSS

Процентиль: 1%
0.00107
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.2
nvd
около 1 месяца назад

Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected security processes.

EPSS

Процентиль: 1%
0.00107
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-269