Lucene search

HYPRCVE-2022-1984

HistoryJul 19, 2022 - 3:15 p.m.

CVE-2022-1984

2022-07-1915:15:08

CWE-502

HYPR

web.nvd.nist.gov

cve-2022-1984

hypr windows wfa

unsafe deserialization

local attack

privilege escalation

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

12.7%

JSON

This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload.

Affected configurations

Nvd

Node

hyprworkforce_accessRange<7.3.0

VendorProductVersionCPE
hyprworkforce_access*cpe:2.3:a:hypr:workforce_access:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hypr	workforce_access	*	cpe:2.3:a:hypr:workforce_access::::::::

CNA Affected

[
  {
    "product": "HYPR Windows WFA",
    "vendor": "HYPR",
    "versions": [
      {
        "lessThan": "7.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.hypr.com/security-advisories/

Social References

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

12.7%

JSON

Related for CVE-2022-1984