← back
CVE-2023-0908

Xoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service

CVSS 5.5 MEDIUMEPSS 0.2%CWE-404
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Feb 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Xoslab · Easy File Locker

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908https://vuldb.com/?ctiid.221457https://vuldb.com/?id.221457