Lucene search

Fluid AttacksCVELIST:CVE-2024-1241

HistoryApr 23, 2024 - 3:52 a.m.

CVE-2024-1241 Watchdog Antivirus v1.6.415 - Denial of Service

2024-04-2303:52:34

CWE-476

Fluid Attacks

www.cve.org

watchdog antivirus

denial of service

vulnerability

ioctl code

wsdk-driver.sys

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

JSON

Watchdog Antivirus v1.6.415 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002014 IOCTL code of the wsdk-driver.sys driver.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "Watchdog Antivirus",
    "vendor": "Watchdog",
    "versions": [
      {
        "status": "affected",
        "version": "1.6.415"
      }
    ]
  }
]

References

fluidattacks.com/advisories/cole/

watchdog.dev/solutions/anti-virus/

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVELIST:CVE-2024-1241