{"id":"CVE-2023-1446","aliases":["EUVD-2023-23696","GHSA-4x92-r8v7-j2m9"],"status":"published","title":"Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 denial of service","description":"A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00329,"percentile":0.26245,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404","CWE-476"],"published":"2023-03-17T06:37:43Z","modified":"2026-06-17T05:27:58Z","products":[{"vendor":"watchdog","product":"anti-virus"}],"references":[{"url":"https://vuldb.com/?id.223291","tags":["vdb-entry","technical-description","x_transferred","Permissions Required","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.223291","tags":["signature","permissions-required","x_transferred","Permissions Required","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1446","tags":["related","x_transferred","Third Party Advisory"]},{"url":"https://drive.google.com/file/d/1zjK_DMjHz41RMpfa0iLQ4GXKQwEr4z2T/view","tags":["exploit","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1446"},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned13"},{"url":"https://github.com/advisories/GHSA-4x92-r8v7-j2m9"}],"sources":{"cve":[{"id":"CVE-2023-1446","title":"Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 denial of service","description":"A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.","status":"published","published":"2023-03-17T06:37:43.218Z","modified":"2024-08-02T05:49:11.669Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","assessor":"cna"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-23696","description":"A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.","status":"published","published":"2023-03-17T06:37:43Z","modified":"2024-08-02T05:49:11Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:15.560413Z"}],"ghsa":[{"id":"GHSA-4x92-r8v7-j2m9","title":"A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by...","description":"A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is an unknown functionality in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.","status":"published","published":"2023-03-17T09:30:19Z","modified":"2023-03-26T09:30:16Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-404","CWE-476"],"updated_at":"2026-11-02T14:54:24.139632Z"}],"nvd":[{"id":"CVE-2023-1446","description":"A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.","status":"published","published":"2023-03-17T07:15:11.727Z","modified":"2026-06-17T05:27:58.57Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"secondary"}],"cwes":["CWE-404","CWE-476"],"updated_at":"2026-11-02T14:07:49.031498Z"}]}}