Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 denial of service
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-404.
Summary
A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-1446
- 2026-10-03 Alias added: GHSA-4x92-r8v7-j2m9
References
More Watchdog Anti-virus vulnerabilities
- TI-2022-18155 Incorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus… CVSS 3.1MEDIUM 6.5
- TI-2022-18165 Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a… CVSS 3.1HIGH 7.8
- TI-2022-20360 Certain Zemana products are vulnerable to Arbitrary code injection. CVSS 3.1MEDIUM 6.7
- TI-2023-01372 Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 access control CVSS 3.1HIGH 7.1
Sources
- CVE-2023-1446 · CVE Program
- CVE-2023-1446 · NVD
- FIRST EPSS
- GHSA-4x92-r8v7-j2m9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences