CVE-2022-43588 - CVE House
Back to Database
Status published Medium CVE-2022-43588

A null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality...

Vulnerability Description

A null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43588

Credits & Attribution

No credits recorded in the NVD database.

References

More from Callback technologies

View All →
CVE-2022-43590
A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality...
Medium 6.2
CVE-2022-43589
A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality...
Medium 6.2

Affected Vendor

Callback technologies

View all reports →

Affected Software

CBFS Filter
Vulnerable Versions:
20.0.8317

Timeline

Official Publish: November 28th, 2022
Last Modified: April 15th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-476

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1499.004 Application or System Exploitation
Impact
T1489 Service Stop
Impact
T1203 Exploitation for Client Execution
Execution
T1190 Exploit Public-Facing Application
Initial Access