← Back to driver explorer
Driver intelligenceVulnerableVerified
wsdkd.sys
A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is the function 0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223298 is the identifier assigned to this vulnerability.
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
wsdkd.sysSample 1 · HVCI TRUE
- MD5
eff3a9cc3e99ef3ddae57df72807f0c7- SHA1
611411538b2bc9045d29bbd07e6845e918343e3c- SHA256
6278bc785113831b2ec3368e2c9c9e89e8aca49085a59d8d38dac651471d6440- Imphash
1e13511288689b63b2e1348bf5eb567b- Authentihash MD5
081783e6cad865b315ac1343a481aab6- Authentihash SHA1
e7d2e9b79774d5fac9c9ce299c7f705f1305d781- Authentihash SHA256
0cb429e6daaba89111d2edb3e01ef1d8ac9b90813b9d80292fe8050287a63146- Machine
- AMD64
- Version
- 0.3.1.0
- Publisher
- WatchDogDevelopment.com, LLC.
Recorded command
sc.exe create wsdkd.sys binPath=C:\windows\temp\wsdkd.sys type=kernel && sc.exe start wsdkd.sysElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: Chris Beckett, Jon Petersen @cbecks_2