CVE-2026-94137
Received Received - Intake

Denial of Service in shzh 10.7.2.693 via IRP_MJ_DEVICE_CONTROL

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: VulDB

Description
A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub_180004AC0 of the file shdrv_x64.sys of the component IRP_MJ_DEVICE_CONTROL Handler. The manipulation of the argument PID leads to denial of service. The attack must be carried out locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-21
Last Modified
2026-09-21
Generated
2026-09-21
AI Q&A
2026-09-21
EPSS Evaluated
N/A
NVD
CVE-2026-94137
EUVD
EUVD-2026-83830

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hangzhou_shunwang_technology shzh 10.7.2.693

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in Hangzhou Shunwang Technology's shzh 10.7.2.693 software. It exists in the shdrv_x64.sys driver's IRP_MJ_DEVICE_CONTROL handler function. The issue allows a local attacker to cause a denial of service by manipulating the PID argument.

Detection Guidance

This vulnerability requires local access to exploit and affects the shdrv_x64.sys driver component. Detection may involve monitoring for unusual IRP_MJ_DEVICE_CONTROL handler activity or crashes in the shzh process. Check for suspicious PID manipulation attempts in system logs or driver interactions.

Impact Analysis

The vulnerability allows a local attacker to crash the system by triggering the affected driver function. This could lead to service disruption or system instability for users running the vulnerable software.

Compliance Impact

This vulnerability causes a local denial of service via the IRP_MJ_DEVICE_CONTROL Handler in shdrv_x64.sys. It does not directly impact data confidentiality or integrity but may disrupt system availability. Compliance standards like GDPR and HIPAA primarily focus on data protection and availability; thus, this issue could indirectly affect compliance by causing service disruptions.

Mitigation Strategies

Since this vulnerability causes a denial of service via a local attack on the shdrv_x64.sys driver, restrict local access to untrusted users and disable or update the affected driver (shzh 10.7.2.693) if a patch is available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94137. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart