Vulnerability · Published Aug 1, 2025 · Assigned by mitre
CVE-2023-44976
Low 3.2
In plain English
A low-severity security flaw in Rentdrv2 from Hangzhou Shunwang. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)3.2Low
Exploit odds (30 days)0.2%top 88.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC
Official description
Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hangzhou Shunwang | Rentdrv2 | 1aed62a63b4802e599bbd33162319129501d603cceeb5e1eb22fd4733b3018a39165d4f3036919a96b86d24b64d75d692802c7513f2b3054b20be40c212240a5 |
Weakness: CWE-782 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L