CVE-2021-42923

Katalog CVE

CVSS 7.3 · High EPSS 0,22%

Kerentanan Uncontrolled Search Path Element pada showmypc. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the file %temp%\ShowMyPC\-ShowMyPC3606\wodVPN.dll, it will run any malicious code contained in that file. The code will run with normal user privileges unless the user specifically runs ShowMyPC as administrator.

Rincian

Terbit di NVD

18 Juli 2022

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://f20.be/cves/showmypc-cve-2021-42923 advisory pihak ketiga