CVEvulnerability
CVE-2023-1489
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-284
Description
A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223375.
Affected configurations
• wisecleaner wise system monitor 1.5.3.54
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://drive.google.com/file/d/15k4sO3qRWDORWjU2QyOVoT_DumX6LrWu/view Exploit
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1489 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.223375 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.223375 Permissions Required, Third Party Advisory
- https://drive.google.com/file/d/15k4sO3qRWDORWjU2QyOVoT_DumX6LrWu/view Exploit
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1489 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.223375 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.223375 Permissions Required, Third Party Advisory