CVE-2022-48199

Katalog CVE

CVSS 8.8 · High EPSS 0,69%

Kerentanan Incorrect Default Permissions pada softperfect networx. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that abuses the Notifications function. The Notifications function allows for arbitrary binary execution and can be modified by any user. The resulting binary execution will occur in the context of any user running NetWorx. If an attacker modifies the Notifications function to execute a malicious binary, the binary will be executed by every user running NetWorx on that system.

Rincian

Terbit di NVD

26 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-276: Incorrect Default Permissions

EPSS (30 hari)

0,69% peluang dieksploitasi; lebih tinggi dari 51,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.softperfect.com/products/changelog.php?product_id=2 release notes · advisory vendor
• https://giuliamelottigaribaldi.com/cve-2022-48199/ advisory pihak ketiga