What’s Vulnerable › Vulnerabilities

CVE-2023-44976

• Severity: low (CVSS 3.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-01 · updated 2026-06-17
• Weakness: CWE-782

Description

Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E010, as exploited in the wild in October 2023.

Affected products

• Hangzhou Shunwang Rentdrv2: 1aed62a63b4802e599bbd33162319129501d603cceeb5e1eb22fd4733b3018a3, 9165d4f3036919a96b86d24b64d75d692802c7513f2b3054b20be40c212240a5

References

• https://github.com/keowu/BadRentdrv2
• https://unit42.paloaltonetworks.com/agonizing-serpens-targets-israeli-tech-higher-ed-sectors/

Get alerted when CVE-2023-44976 or the next vulnerability affects your stack