CVE-2023-1487

Опубликовано: 18 мар. 2023

Источник: nvd

CVSS3: 5.5

CVSS2: 4.6

EPSS Низкий

Описание

A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C40208C/0x9C402000/0x9C402084/0x9C402088/0x9C402004/0x9C4060C4/0x9C4060CC/0x9C4060D0/0x9C4060D4/0x9C40A0DC/0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability.

Ссылки

https://drive.google.com/file/d/1zk_ErtD34TBnQu8VGTUZKQpGGVDaUR1y/view
Exploit
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1487
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.223373
Permissions Required
Third Party Advisory
https://vuldb.com/?id.223373
Permissions Required
Third Party Advisory
https://drive.google.com/file/d/1zk_ErtD34TBnQu8VGTUZKQpGGVDaUR1y/view
Exploit
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1487
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.223373
Permissions Required
Third Party Advisory
https://vuldb.com/?id.223373
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wisecleaner:wise_system_monitor:1.5.3.54:*:*:*:*:*:*:*

EPSS

Процентиль: 9%

0.00033

Низкий

5.5 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-404

Связанные уязвимости

GHSA-8jf7-ggvh-m494