CVE-2023-2870 : A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vul

A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier VDB-229849 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Published 2023-05-24 18:15:10

Updated 2024-05-17 02:23:20

Source VulDB

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2023-2870

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-2870

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
1.7	LOW	AV:L/AC:L/Au:S/C:N/I:N/A:P	3.1	2.9	VulDB
Access Vector: Local Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
3.3	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	1.8	1.4	VulDB
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	1.8	1.4	VulDB	2024-02-29
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2023-2870

https://vuldb.com/?id.229849

CVE-2023-2870: EnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service
Third Party Advisory
https://drive.google.com/file/d/1ehTYhcdeTiB4rQ38n5FqhQZgVqcvvPE_/view?usp=sharing

DoS.zip - Google Drive
Third Party Advisory
https://vuldb.com/?ctiid.229849

CVE-2023-2870: EnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service
Permissions Required;Third Party Advisory
https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2870

WindowsKernelVuln/CVE-2023-2870 at master · zeze-zeze/WindowsKernelVuln · GitHub
Exploit;Third Party Advisory

Products affected by CVE-2023-2870

Entechtaiwan » Monitor Asset Manager » Version: 2.9
cpe:2.3:a:entechtaiwan:monitor_asset_manager:2.9:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2023-2870

Exploit prediction scoring system (EPSS) score for CVE-2023-2870

CVSS scores for CVE-2023-2870

CWE ids for CVE-2023-2870

References for CVE-2023-2870

Products affected by CVE-2023-2870