Denial of Service in Windows Optimization Master by WoptiHWDetect Driver
CVE-2018-8993

7.8HIGH

Key Information:

Vendor: Windows Optimization Master Project
Status: Windows Optimization Master
Vendor: CVE Published:; 25 March 2018

🔔 Create Windows Optimization Master Project Vulnerability Alert

What is CVE-2018-8993?

A vulnerability exists in the Windows Optimization Master product, specifically concerning the driver file WoptiHWDetect.SYS. This flaw allows local users to trigger a denial of service (BSOD) due to a failure to properly validate input values from the IO control code 0xf1002001. As a result, users could experience system crashes or other unpredictable behavior, emphasizing the necessity for implementing proper input validation mechanisms.

References

https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%2...

x_refsource_MISC

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 25, 2018
Vulnerability Reserved
Mar 24, 2018

JSON