CVE-2023-44976

LOW

Exposed IOCTL with Insufficient Access Control

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2023-44976 has a selected CVSS score of 3.2 (low).

Description

Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 23, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 1, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Rentdrv2

Browse Hangzhou Shunwang / Rentdrv2

Default status: unknown

CVE List1aed62a63b4802e599bbd33162319129501d603cceeb5e1eb22fd4733b3018a3affected
9165d4f3036919a96b86d24b64d75d692802c7513f2b3054b20be40c212240a5affected

customer_support_system

Browse oretnom23 / customer_support_system
VulnCheckVersion data not supplied

References

3