CVE-2022-50931

Katalog CVE

CVSS 7.8 · High EPSS 0,23%

Kerentanan Incorrect Permission Assignment for Critical Resource pada teamspeak. Skor CVSS 3.1 7.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3client_win32.exe with custom files to potentially gain SYSTEM or Administrator-level access.

Rincian

Terbit di NVD

13 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/50743 exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/teamspeak-insecure-file-permissions advisory pihak ketiga
• https://www.teamspeak.com product
• https://www.teamspeak.com/en/downloads product