CVE-2023-41444

2023-09-2800:00:00

mitre

github.com

binalyze

irec.sys

local attacker

arbitrary code

escalate privileges

AI Score

7.8

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privileges via the fun_1400084d0 function in IREC.sys driver.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:binalyze:irec:-:*:*:*:*:*:*:*"
    ],
    "vendor": "binalyze",
    "product": "irec",
    "versions": [
      {
        "status": "affected",
        "version": "3.11.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]