CVE-2022-43589CWE-476

A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317

Medium · published November 28, 2022

CVSS v3.0
6.2
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
6.2 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.8th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2022-11-28T10:20Z
EPSS history
Timeline
  • 28 NOV 10:20Z
    A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317
    cvelistv5