CVE-2023-1491

Name of the Vulnerable Software and Affected Versions Max Secure Anti Virus Plus version 19.0.2.1

Description A critical issue has been found, affecting the 0x220020 function in the MaxCryptMon.sys library of the IoControlCode Handler component. This leads to improper access controls, requiring local access for exploitation. The issue has been publicly disclosed and may be exploited.

Recommendations For Max Secure Anti Virus Plus version 19.0.2.1, consider restricting access to the MaxCryptMon.sys library to minimize the risk of exploitation. As a temporary workaround, limit the use of the IoControlCode Handler component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.