Vulnerability · Published Mar 18, 2023 · Assigned by VulDB
CVE-2023-1489Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C402088 access control
High 7.8
In plain English
A high-severity improper access control in WiseCleaner Wise System Monitor from Lespeed. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Official description
A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223375.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Lespeed | WiseCleaner Wise System Monitor | 1.5.3.54 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://vuldb.com/?id.223375 vdb-entry, technical-description
- https://vuldb.com/?ctiid.223375 signature, permissions-required
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1489 related
- https://drive.google.com/file/d/15k4sO3qRWDORWjU2QyOVoT_DumX6LrWu/view exploit