PT-2023-16717 · Techpowerup · Techpowerup Ryzen Dram Calculator

Zeze7W · Published 2023-02-26 · Updated 2024-05-17 · CVE-2023-1048

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TechPowerUp Ryzen DRAM Calculator version 1.2.0.5

Description A critical issue has been found in the library WinRing0x64.sys, affecting some unknown processing. The manipulation leads to improper initialization, requiring local access to approach this attack. The exploit has been disclosed to the public and may be used.

Recommendations For version 1.2.0.5, consider disabling the use of the library WinRing0x64.sys until a patch is available. Restrict local access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2023-1048

Affected Products

Techpowerup Ryzen Dram Calculator

References · 9

• 🔥 https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1048 · Exploit
• https://osv.dev/vulnerability/CVE-2023-1048 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1048 · Security Note
• https://t.me/cvenotify/45017 · Telegram Post
• https://t.me/cvenotify/45758 · Telegram Post
• https://t.me/cibsecurity/58907 · Telegram Post
• https://vuldb.com/?id.221807 · Note
• https://t.me/cvenotify/45011 · Telegram Post
• https://vuldb.com/?ctiid.221807 · Note