Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 access control

CVE-2023-1453

What is CVE-2023-1453?

A vulnerability has been identified in Watchdog Anti-Virus version 1.4.214.0, specifically within the function 0x80002008 located in the library wsdk-driver.sys. This issue arises from improper access controls within the IoControlCode Handler. Successful exploitation of this vulnerability requires local access, allowing malicious actors to manipulate access controls and gain unauthorized permissions. The public disclosure of the exploit raises concerns for users and organizations relying on this antivirus solution. Precautionary measures should be taken to mitigate potential risks.

References