CVE-2022-23410

Katalog CVE

CVSS 7.8 · High EPSS 0,38%

Kerentanan Uncontrolled Search Path Element pada axis ip utility. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.

Rincian

Terbit di NVD

14 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.axis.com/files/tech_notes/CVE-2022-23410.pdf advisory vendor