CVE-2023-1628

Jianming Antivirus IoControlCode kvcore.sys null pointer dereference

CVSS 5.5 MEDIUMEPSS 0.3%CWE-476

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

25 mar 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

Jianming · Antivirus

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30 https://vuldb.com/?ctiid.224010 https://vuldb.com/?id.224010