PT-2023-7709

CVE-2023-35629

·

Published

2023-12-12

·

Updated

2024-05-29

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft USBHUB 3.0 Device Driver (affected versions not specified)
Description The issue is related to insufficient input validation in the USB 3.0 HUB driver for Windows operating systems. It allows remote attackers to execute arbitrary code and affect the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
CWE-125: Out-of-bounds Read
Related identifiers
CVE-2023-35629
BDU:2023-08776
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com