Beveiligingsadvies

CVE-2022-48226

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-04 00:00:00
Laatst bijgewerkt 2025-02-13 21:38:17
Toegewezen door mitre
CVSS-score 8.4
Status PUBLISHED

Beschrijving

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standard user can create the path file ahead of time and obtain elevated code execution. Permissions need to be modified to prevent manipulation.