CVE-2023-1487
A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54.
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C40208C/0x9C402000/0x9C402084/0x9C402088/0x9C402004/0x9C4060C4/0x9C4060CC/0x9C4060D0/0x9C4060D4/0x9C40A0DC/0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-404
- Affected
- wisecleaner/wise system monitor
- Source
- cna@vuldb.com
References
- https://drive.google.com/file/d/1zk_ErtD34TBnQu8VGTUZKQpGGVDaUR1y/viewExploit
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1487Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.223373Permissions Required, Third Party Advisory
- https://vuldb.com/?id.223373Permissions Required, Third Party Advisory
- https://drive.google.com/file/d/1zk_ErtD34TBnQu8VGTUZKQpGGVDaUR1y/viewExploit
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1487Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.223373Permissions Required, Third Party Advisory
- https://vuldb.com/?id.223373Permissions Required, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.