2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"XIGNCODE3","vendor":"Wellbia","versions":[{"lessThanOrEqual":"2023.12.7.78","status":"affected","version":"10.0.10011.16384","versionType":"custom"}]}],"source":"cret@cert.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:wellbia:xigncode3:10.0.10011.16384:*:*:*:*:*:*:*","matchCriteriaId":"413C1845-5509-4DB1-9BA7-FF1CF00E7365","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE command interface, which allows any user process to request a PROCESS_ALL_ACCESS.\r\n\r\nNote: KVE 2023-5589 (https://krcert.or.kr) was initially issued for version 10.0.10011.16384, but the vulnerability was not fully remediated and remains in version 2023.12.7.78."},{"lang":"es","value":"La vulnerabilidad de escalada de privilegios en el controlador de kernel xhunter1.sys de XIGNCODE3 de Wellbia proporciona acceso a la interfaz de comandos IRP_MJ_REITS, lo que permite a cualquier proceso de usuario solicitar un PROCESS_ALL_ACCESS.\nReferencia cruzada a KVE 2023-5589 (https://krcert.or.kr)"}],"id":"CVE-2026-3609","lastModified":"2026-10-26T00:10:00.150","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3609","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-13T12:35:38.266419Z","version":"2.0.3"}}]},"published":"2026-05-11T18:16:33.560","references":[{"source":"cret@cert.org","tags":["Exploit","Third Party Advisory"],"url":"https://blacksnufkin.github.io/posts/AntiCheat-LPE-CVE-2026-3609/"},{"source":"cret@cert.org","url":"https://blacksnufkin.github.io/posts/Hunting-the-Hunter/"},{"source":"cret@cert.org","tags":["Broken Link"],"url":"https://crcert.or.kr"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"],"url":"https://blacksnufkin.github.io/posts/AntiCheat-LPE-CVE-2026-3609/"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|