CVE-2022-48224

Katalog CVE

CVSS 7.3 · High EPSS 0,22%

Kerentanan Uncontrolled Search Path Element pada gbgplc acuant acufill sdk. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write access within Program Files). Standard users can replace files within this directory that get executed with elevated privileges, leading to a complete arbitrary code execution (elevation of privileges).

Rincian

Terbit di NVD

4 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://hackandpwn.com/disclosures/CVE-2022-48224.pdf advisory pihak ketiga
• https://acuant.com not applicable