← Zuruck zu CVEs
CVE-2023-2871
LOW3.3
Beschreibung
A vulnerability was found in FabulaTech USB for Remote Desktop 6.1.0.0. It has been rated as problematic. Affected by this issue is the function 0x220448/0x220420/0x22040c/0x220408 of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-229850 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE Details
CVSS v3.1 Bewertung3.3
SchweregradLOW
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienLOW
BenutzerinteraktionNONE
Veroffentlicht5/24/2023
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
fabulatech:usb_for_remote_desktop
Schwachen (CWE)
CWE-476
Referenzen
https://vuldb.com/?ctiid.229850(cna@vuldb.com)
https://vuldb.com/?id.229850(cna@vuldb.com)
https://drive.google.com/file/d/1Y8e5f0AjddrozLv155r9cNhkXwwwZbYE/view?usp=sharing(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2871(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.229850(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.229850(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.