Null Pointer Dereference Vulnerability in CBFS Filter 20.0.8317: Denial of Service via IOCTL

CVE-2022-43589 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.

Learn more about our Web Application Penetration Testing UK.