Medium severity · published Mar 25, 2023
CVE-2023-1630
JiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service
5.5
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antivirus · JiangMin
16.2.2022.418 · source: vendor
JA
Jiangmin Antivirus · Jiangmin
16.2.2022.418 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-1630
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-1630
Exploit
https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view
Third Party Advisory
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1630
Permissions Required
https://vuldb.com/?ctiid.224012
Permissions Required
https://vuldb.com/?id.224012
More from Antivirus
7.8
CVE-2026-19193
Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control
7.8
CVE-2023-1629
JiangMin Antivirus IOCTL kvcore.sys 0x222010 memory corruption
7.8
CVE-2018-6788
In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not…
7.8
CVE-2018-6787
In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not…
7.8
CVE-2018-6786
In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not…