CVE-2018-9049

low-risk
Published 2018-03-27

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002833.

Do I need to act?

-
0.04% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Windows Optimization Master Project

References (2)

Exploit https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/...
Exploit https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/...
29
/ 100
low-risk
Severity 24/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal