{"id":"CVE-2023-1186","aliases":["EUVD-2023-23466","GHSA-w5gw-948h-gpgm"],"status":"published","title":"FabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereference","description":"A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00369,"percentile":0.31178,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2023-03-06T07:09:57Z","modified":"2026-06-17T05:27:18Z","products":[{"vendor":"fabulatech","product":"webcam for remote desktop"},{"vendor":"fabulatech","product":"webcam_for_remote_desktop"}],"references":[{"url":"https://vuldb.com/?id.222358","tags":["vdb-entry","technical-description","x_transferred","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.222358","tags":["signature","permissions-required","x_transferred","Third Party Advisory"]},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186","tags":["exploit","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1186"},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned6"},{"url":"https://github.com/advisories/GHSA-w5gw-948h-gpgm"}],"sources":{"cve":[{"id":"CVE-2023-1186","title":"FabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereference","description":"A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.","status":"published","published":"2023-03-06T07:09:57.318Z","modified":"2024-11-25T15:22:56.22Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:35:32.376766Z"}],"euvd":[{"id":"EUVD-2023-23466","description":"A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.","status":"published","published":"2023-03-06T07:09:57Z","modified":"2024-11-25T15:22:56Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-03T00:04:49.212921Z"}],"ghsa":[{"id":"GHSA-w5gw-948h-gpgm","title":"A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as...","description":"A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects unknown code in the library ftwebcam.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.","status":"published","published":"2023-03-06T09:30:18Z","modified":"2023-03-19T05:03:26Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:54:21.862765Z"}],"nvd":[{"id":"CVE-2023-1186","description":"A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.","status":"published","published":"2023-03-06T08:15:08.683Z","modified":"2026-06-17T05:27:18.423Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","level":"low","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:48.342507Z"}]}}