CVE-2023-44976 | BDVDB-2026-288164 Detail

Hangzhou ShunwangRentdrv2

Description#

Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: local.

Weaknesses#

CWE-782 Exposed IOCTL with Insufficient Access Control

References#

Exploit#

No public exploit known

History#

Version 12025-08-01Record published in the CVE List.

Published

Published: 2025-08-01
Last modified: 2025-08-01

Vendor information

Vendor: Hangzhou Shunwang
Product: Rentdrv2

All Hangzhou Shunwang vulnerabilities

Score

3.2 Low

EPSS

less than 1%, Very Low

Estimated chance of exploitation in the next 30 days. EPSS percentile: 23.2.

KEV

Not listed in the CISA Known Exploited Vulnerabilities catalog.

Impact

Not classified

Action

No specific action is recorded in the source data. Check the references for vendor guidance.

Affected Systems

Vulnerable
1aed62a63b4802e599bbd33162319129501d603cceeb5e1eb22fd4733b3018a3
Fixed
Not stated
Vulnerable
9165d4f3036919a96b86d24b64d75d692802c7513f2b3054b20be40c212240a5
Fixed
Not stated

Scoring System

CVSS v4.0

Not available

CVSS v3.1

3.2 Low

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Metric breakdown
Attack Vector	Local
Attack Complexity	Low
Privileges Required	High
User Interaction	None
Scope	Changed
Confidentiality	None
Integrity	None
Availability	Low

CVSS v3.0

Not available

CVSS v2

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).