Lucene search

VulDBCVE-2023-1487

HistoryMar 18, 2023 - 9:15 p.m.

CVE-2023-1487

2023-03-1821:15:11

CWE-404

VulDB

web.nvd.nist.gov

cve-2023-1487

lespeed wisecleaner wise system monitor

vulnerability

denial of service

iocontrolcode handler

wisehdinfo64.dll

nvd

vdb-223373

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C40208C/0x9C402000/0x9C402084/0x9C402088/0x9C402004/0x9C4060C4/0x9C4060CC/0x9C4060D0/0x9C4060D4/0x9C40A0DC/0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability.

Affected configurations

Nvd

Vulners

Node

wisecleanerwise_system_monitorMatch1.5.3.54

VendorProductVersionCPE
wisecleanerwise_system_monitor1.5.3.54cpe:2.3:a:wisecleaner:wise_system_monitor:1.5.3.54:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wisecleaner	wise_system_monitor	1.5.3.54	cpe:2.3:a:wisecleaner:wise_system_monitor:1.5.3.54:::::::*

CNA Affected

[
  {
    "vendor": "Lespeed",
    "product": "WiseCleaner Wise System Monitor",
    "versions": [
      {
        "version": "1.5.3.54",
        "status": "affected"
      }
    ],
    "modules": [
      "IoControlCode Handler"
    ]
  }
]

References

drive.google.com/file/d/1zk_ErtD34TBnQu8VGTUZKQpGGVDaUR1y/view

github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1487

vuldb.com/?ctiid.223373

vuldb.com/?id.223373

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-1487