Vulnerabilities > CVE-2023-41444 - Unspecified vulnerability in Binalyze Irec 3.11.0

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
binalyze
NVD
Published: 2023-09-28
Updated: 2024-11-21

Summary

An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privileges via the fun_1400084d0 function in IREC.sys driver.

Vulnerable Configurations

Part Description Count
Application
Binalyze
2
OS
Microsoft
1

References