Lucene search

VulDBCVE-2023-2872

HistoryMay 24, 2023 - 6:15 p.m.

CVE-2023-2872

2023-05-2418:15:10

CWE-476

VulDB

web.nvd.nist.gov

flexihub

vulnerability

null pointer dereference

iocontrolcode handler

cve-2023-2872

nvd

vdb-229851

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability classified as problematic has been found in FlexiHub 5.5.14691.0. This affects the function 0x220088 in the library fusbhub.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229851. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected configurations

Nvd

Vulners

Node

electronicflexihubMatch5.5.14691.0

VendorProductVersionCPE
electronicflexihub5.5.14691.0cpe:2.3:a:electronic:flexihub:5.5.14691.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
electronic	flexihub	5.5.14691.0	cpe:2.3:a:electronic:flexihub:5.5.14691.0:::::::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "FlexiHub",
    "versions": [
      {
        "version": "5.5.14691.0",
        "status": "affected"
      }
    ],
    "modules": [
      "IoControlCode Handler"
    ]
  }
]

References

drive.google.com/file/d/1h-7fnmb31bkEW4FoLNDlneftDqS4TQHT/view?usp=sharing

github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2872

vuldb.com/?ctiid.229851

vuldb.com/?id.229851

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-2872