CVE-2023-44976
50Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 3.2epss 0.2%
from disclosure to weapon0 days
Published on NVDAug 1
1st PoCOct 1
VulnCheckNov 23
exploitation probability
0.2%top 92% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
Affected products
Hangzhou Shunwang · Rentdrv2public PoCs found — 1
vulncheckvulncheck.com/xdb/cbafa512fa0bunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.