A vulnerability was found in FabulaTech USB for Remote Desktop 6.1.0.0. It has been rated as problematic. Affected by this issue is the function 0x220448/0x220420/0x22040c/0x220408 of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-229850 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://drive.google.com/file/d/1Y8e5f0AjddrozLv155r9cNhkXwwwZbYE/view?usp=sharing | Third Party Advisory |
| https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2871 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.229850 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.229850 | Third Party Advisory |
| https://drive.google.com/file/d/1Y8e5f0AjddrozLv155r9cNhkXwwwZbYE/view?usp=sharing | Third Party Advisory |
| https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2871 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.229850 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.229850 | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:59
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 1.7
v3 : 3.3 |
| References | () https://drive.google.com/file/d/1Y8e5f0AjddrozLv155r9cNhkXwwwZbYE/view?usp=sharing - Third Party Advisory | |
| References | () https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2871 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.229850 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.229850 - Third Party Advisory |
31 May 2023, 17:34
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fabulatech:usb_for_remote_desktop:6.1.0.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Fabulatech usb For Remote Desktop
Fabulatech |
|
| References | (MISC) https://drive.google.com/file/d/1Y8e5f0AjddrozLv155r9cNhkXwwwZbYE/view?usp=sharing - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.229850 - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?ctiid.229850 - Permissions Required, Third Party Advisory | |
| References | (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2871 - Exploit, Third Party Advisory |
Information
Published : 2023-05-24 18:15
Updated : 2024-11-21 07:59
NVD link : CVE-2023-2871
Mitre link : CVE-2023-2871
CVE.ORG link : CVE-2023-2871
JSON object : View
Products Affected
fabulatech
- usb_for_remote_desktop
CWE
CWE-476
NULL Pointer Dereference