Lucene search
HistorySep 13, 2022 - 10:15 p.m.
CVE-2022-34101
cve-2022-34101
vulnerability
crestron airmedia
windows application
dll
code execution
privilege escalation
nvd
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
32.7%
A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL in a certain path to execute code and preform a privilege escalation attack.
Affected configurations
Node
crestronairmediaMatch4.3.1.39windows
| CPE | Name | Operator | Version |
|---|---|---|---|
| crestron:airmedia | crestron airmedia | eq | 4.3.1.39 |
References
Social References
More
Related
nvd
nvd
CVE-2022-34101
2022-09-13 22:15:08
cvelist
cvelist
CVE-2022-34101
2022-09-13 21:47:01
prion
prion
Privilege escalation
2022-09-13 22:15:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
32.7%
Related for CVE-2022-34101