CVE-2023-44976

Published: Aug 1, 2025Modified: Jun 17, 2026Deferred

3.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Exploitability: 1.5 / Impact: 1.4

Source: MITRE (Secondary)

Description

Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023.

Related CWEs

CWE-782

Exposed IOCTL with Insufficient Access Control

The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

References (2)

https://github.com/keowu/BadRentdrv2

Source: cve@mitre.org

https://unit42.paloaltonetworks.com/agonizing-serpens-targets-israeli-tech-higher-ed-sectors/

Source: cve@mitre.org

Timeline

No history available yet.