Description (CNA)
Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hangzhou Shunwang / Rentdrv2 | affected 1aed62a63b4802e599bbd33162319129501d603cceeb5e1eb22fd4733b3018a3; affected 9165d4f3036919a96b86d24b64d75d692802c7513f2b3054b20be40c212240a5 |
CWE
CWE-782
References
- https://github.com/keowu/BadRentdrv2
- https://unit42.paloaltonetworks.com/agonizing-serpens-targets-israeli-tech-higher-ed-sectors/
ADP enrichment
No English description supplied.
No references supplied.