CVE-2022-32427

Katalog CVE

CVSS 8.8 · High EPSS 1,8%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada printerlogic windows client. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal. Authenticated users with prior knowledge of the driver filename could exploit this to escalate privileges or distribute malicious content. This issue has been resolved in PrinterLogic Windows Client 25.0.0688 and all affected are advised to upgrade.

Rincian

Terbit di NVD

25 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm?tocpath=_____9 release notes · advisory vendor
• https://www.printerlogic.com/security-bulletin/ advisory vendor