PT-2023-16716 · Techpowerup · Techpowerup Realtemp

·

CVE-2023-1047

·

Published

2023-02-26

·

Updated

2024-05-17

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TechPowerUp RealTemp version 3.7.0.0
Description A critical vulnerability was found in the library WinRing0x64.sys, leading to improper initialization. The attack must be approached locally. The exploit has been disclosed to the public and may be used.
Recommendations For TechPowerUp RealTemp version 3.7.0.0, update to a newer version that addresses the improper initialization issue in the WinRing0x64.sys library. As a temporary workaround, consider restricting access to the WinRing0x64.sys library until a patch is available.

Exploit

Fix

Improper Initialization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-1047

Affected Products

Techpowerup Realtemp