Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88189
HistorySep 28, 2022 - 12:00 a.m.

UI Desktop Local Elevation of Privilege Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

UI Desktop is a desktop management software from the UI community. UI Desktop for Windows versions prior to 0.55.3.17 contain a local elevation of privilege vulnerability, which stems from improper privilege management of the application and could be exploited to locally access a Windows device with UI Desktop to run arbitrary commands as SYSTEM.

CPENameOperatorVersion
ui ui desktop <0.eq55.3.17

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Related for CNVD-2022-88189