CVE-2023-44976

State: Published
Severity: 3.2 Low
Published: Aug 1, 2025
Updated: Aug 1, 2025
Reserved: Oct 2, 2023

Description

Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023.

Scores

CVSS	Score	Vector	Source
3.1	3.2 Low	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L	mitre

Weaknesses

CWE-782 Exposed IOCTL with Insufficient Access Control

Affected Products

Product	Versions
Rentdrv2Hangzhou Shunwang	1aed62a63b4802e599bbd33162319129501d603cceeb5e1eb22fd4733b3018a3Affected 9165d4f3036919a96b86d24b64d75d692802c7513f2b3054b20be40c212240a5Affected

References

https://github.com/keowu/BadRentdrv2
https://unit42.paloaltonetworks.com/agonizing-serpens-targets-israeli-tech-higher-ed-sectors/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.