Vulnerability · Published Mar 6, 2023 · Assigned by VulDB

CVE-2023-1189WiseCleaner Wise Folder Hider IoControlCode WiseFs64.sys 0x222410 denial of service

Low 3.3

In plain English

A low-severity security flaw in Wise Folder Hider from WiseCleaner. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)3.3Low

Exploit odds (30 days)0.4%top 67.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-222361 was assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
WiseCleaner	Wise Folder Hider	4.4.3.202

Weakness: CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References

https://vuldb.com/?id.222361 vdb-entry, technical-description
https://vuldb.com/?ctiid.222361 signature, permissions-required
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1189 exploit