CVE-2023-1491

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:maxpcsecure:anti_virus_plus:19.0.2.1:*:*:*:*:*:*:*

History

07 Nov 2023, 04:03

Type Values Removed Values Added
CWE CWE-284

26 Mar 2023, 08:15

Type Values Removed Values Added
CWE CWE-284
Summary A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects an unknown part in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerability. A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerability.

24 Mar 2023, 14:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CPE cpe:2.3:a:maxpcsecure:anti_virus_plus:19.0.2.1:*:*:*:*:*:*:*
First Time Maxpcsecure anti Virus Plus
Maxpcsecure
References (MISC) https://drive.google.com/file/d/1-h-6ijBvucNU-dYglWW5n4l2ys-MDAF9/view - (MISC) https://drive.google.com/file/d/1-h-6ijBvucNU-dYglWW5n4l2ys-MDAF9/view - Exploit
References (MISC) https://vuldb.com/?id.223377 - (MISC) https://vuldb.com/?id.223377 - Third Party Advisory
References (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1491 - (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1491 - Exploit, Third Party Advisory
References (MISC) https://vuldb.com/?ctiid.223377 - (MISC) https://vuldb.com/?ctiid.223377 - Permissions Required, Third Party Advisory

19 Mar 2023, 19:15

Type Values Removed Values Added
References
  • {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned22', 'name': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned22', 'tags': [], 'refsource': 'MISC'}
  • (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1491 -

18 Mar 2023, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-03-18 22:15

Updated : 2024-03-21 02:45


NVD link : CVE-2023-1491

Mitre link : CVE-2023-1491

CVE.ORG link : CVE-2023-1491


JSON object : View

Products Affected

maxpcsecure

  • anti_virus_plus
CWE
CWE-284

Improper Access Control