Lucene search
HistorySep 07, 2022 - 2:15 p.m.
CVE-2022-36271
cve-2022-36271
outbyte pc repair
installation file
dll hijacking
iertutil.dll
admin privileges
vulnerability
nvd
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
32.1%
Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges.
Affected configurations
Node
outbytepc_repairMatch1.7.112.7856
| CPE | Name | Operator | Version |
|---|---|---|---|
| outbyte:pc_repair | outbyte pc repair | eq | 1.7.112.7856 |
Social References
More
Related
cvelist
cvelist
CVE-2022-36271
2022-09-07 13:46:44
nvd
nvd
CVE-2022-36271
2022-09-07 14:15:09
prion
prion
Design/Logic Flaw
2022-09-07 14:15:00
githubexploit
githubexploit
Exploit for Uncontrolled Search Path Element in Outbyte Pc Repair
2022-08-16 19:48:36
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
32.1%
Related for CVE-2022-36271