CVE-2023-1453
Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 access control
A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is the function 0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223298 is the identifier assigned to this vulnerability. Eine kritische Schwachstelle wurde in Watchdog Anti-Virus 1.4.214.0 ausgemacht. Betroffen davon ist die Funktion 0x80002008 in der Bibliothek wsdk-driver.sys der Komponente IoControlCode Handler. Durch das Beeinflussen mit unbekannten Daten kann eine improper access controls-Schwachstelle ausgenutzt werden. Der Angriff muss lokal passieren. Der Exploit steht zur öffentlichen Verfügung.
- Affected
- Watchdog · Anti-Virus
- CVSS v3.1 NVD
- 7.1 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H - CVSS v3.1 VULDB
- 4.4 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - CVSS v2.0 VULDB
- 3.2 LOW
AV:L/AC:L/Au:S/C:N/I:P/A:P - EPSS
- 0.33% chance of exploitation in the next 30 days, 24th percentile
- Published
- 2023-03-17
- Updated
- 2024-08-02
Proof-of-concept exploits (1)
Security advisories
- zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1453
- https://vuldb.com/?ctiid.223298
- https://vuldb.com/?id.223298