CVE-2023-1486mediumobserved exploitationCWE-284

CVE-2023-1486: medium-severity vulnerability in Lespeed WiseCleaner Wise Force Deleter

Lespeed WiseCleaner Wise Force Deleter IoControlCode WiseUnlock64.sys 0x220004 access control

Published · Updated

Follow this CVE+ Monitor WiseCleaner Wise Force Deleter

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

55Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 4.4epss 0.5%
from disclosure to weapon277 days
Published on NVDMar 18
1st PoC+277d
VulnCheck+823d
A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223372.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected products
Lespeed · WiseCleaner Wise Force Deleter
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.